search menu icon-carat-right cmu-wordmark

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2016-02-02 2016-02-02 2016-02-02 VU#719736 4.4 Fisher-Price Smart Toy platform allows some unauthenticated web API commands
2013-06-18 2013-06-18 2013-06-26 VU#225657 4.4 Oracle Javadoc HTML frame injection vulnerability
2013-05-17 2013-05-14 2013-05-17 VU#774103 4.4 Linux kernel perf_swevent_enabled array out-of-bound access privilege escalation vulnerability
2012-11-09 2012-10-29 2012-11-19 VU#795644 4.4 Esri ArcGIS server 10.1 contains a blind SQL injection vulnerability
2015-12-08 2015-12-08 2015-12-08 VU#439016 4.4 TaxiHail Android mobile app contains multiple vulnerabilties
2015-11-02 2015-10-31 2015-11-02 VU#316888 4.4 MobaXterm server may allow arbitrary command injection due to missing X11 authentication
2015-12-16 2015-12-16 2015-12-27 VU#176160 4.4 IPswitch WhatsUp Gold contains multiple XSS vulnerabilities and a SQLi
2016-04-29 2016-04-21 2016-04-29 VU#505560 4.4 Accellion File Transfer Appliance (FTA) contains multiple vulnerabilities
2016-07-12 2016-07-12 2016-07-12 VU#123799 4.4 libbpg contains a type confusion vulnerability that leads to out of bounds write
2016-03-17 2016-03-17 2016-04-18 VU#897144 4.4 Solarwinds Dameware Remote Mini Controller Windows service is vulnerable to stack buffer overflow
2019-11-01 2019-10-31 2019-11-15 VU#125336 4.4 Microsoft Office for Mac cannot properly disable XLM macros
2015-09-10 2015-09-10 2015-09-15 VU#906576 4.4 Securifi Almond routers contains multiple vulnerabilities
2015-10-21 2015-10-21 2015-10-21 VU#840844 4.4 HP Photosmart B210 printer SMB server buffer overflow vulnerability
2018-12-20 2018-12-21 2019-01-15 VU#741315 4.3 Dokan file system driver contains a stack-based buffer overflow
2018-12-20 2018-12-19 2018-12-20 VU#228297 4.3 Microsoft Windows MsiAdvertiseProduct function vulnerable to privilege escalation via race condition

Sponsored by CISA.