search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2015-01-05 2014-12-28 2015-02-03 VU#533140 3.8 Tianocore UEFI implementation reclaim function vulnerable to buffer overflow
2015-01-05 2014-12-28 2015-07-23 VU#766164 5.3 Intel BIOS locking mechanism contains race condition that enables write protection bypass
2016-01-04 2015-01-04 2016-01-04 VU#820196 1.8 Furuno Voyage Data Recorder (VDR) moduleserv firmware update utility fails to properly sanitize user-provided input
2015-01-16 2015-01-16 2015-01-21 VU#936356 6.8 Ceragon FiberAir IP-10 Microwave Bridge contains a default root password
2015-01-21 2015-01-21 2015-01-21 VU#110652 5.0 iPass Open Mobile Windows Client contains a remote code execution vulnerability
2015-01-23 2015-01-23 2015-01-23 VU#546340 2.5 QPR Portal contains multiple vulnerabilities
2015-01-23 2015-01-23 2015-01-29 VU#637068 5.8 LabTech contains privilege escalation vulnerability
2015-11-13 2015-01-28 2018-08-27 VU#576313 6.4 Apache Commons Collections Java library insecurely deserializes data
2015-01-28 2015-01-28 2015-10-22 VU#967332 5.9 GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow
2015-02-02 2015-02-02 2015-02-02 VU#522460 5.9 SerVision HVG Video Gateway web interface contains multiple vulnerabilities
2015-02-13 2015-02-04 2015-02-27 VU#695940 2.9 Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability
2015-02-05 2015-02-05 2015-02-06 VU#669156 1.3 Topline Systems Opportunity Form vulnerable to information disclosure
2015-02-13 2015-02-13 2015-02-13 VU#787252 8.5 Microsoft Windows domain-configured client Group Policy fails to authenticate servers
2015-02-19 2015-02-19 2015-03-17 VU#529496 8.6 Komodia Redirector with SSL Digestor fails to properly validate SSL and installs non-unique root CA certificates and private keys
2015-02-23 2015-02-22 2015-02-26 VU#366544 8.0 Adtrustmedia PrivDog fails to validate SSL certificates

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis