search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2026-11-13 2026-11-13 2026-11-13 VU#644655 TightVNC and UltraVNC Viewer contains a heap-based buffer overflow
2026-11-12 2026-11-12 2026-11-12 VU#580079 Arbitrary file read/write vulnerability in ImageMagick-based applications with default configuration
2026-11-12 2026-11-12 2026-11-12 VU#685399 PromZard context key code injection leads to remote code execution
2026-11-12 2026-11-12 2026-11-12 VU#944667 ComfyUI-Easy-Use contains unauthenticated path traversal vulnerability
2026-11-09 2026-11-09 2026-11-09 VU#188754 FrodoBots EarthRover Mini+ firmware contains multiple vulnerabilities
2026-11-09 2026-11-09 2026-11-11 VU#385711 PrestaShop debug mode configuration allows PHP code injection
2026-11-03 2026-11-03 2026-11-03 VU#124705 BaseChat – Audio Dating App, Android version 9.8.1, contains multiple vulnerabilities
2026-11-02 2026-11-02 2026-11-11 VU#203719 INFINITT PACS System Manager contains multiple code execution vulnerabilities
2026-10-26 2026-10-26 2026-11-11 VU#701544 Retraction of mpc-lib hardened derivation fails to protect ancestor isolation
2026-10-26 2026-10-26 2026-10-26 VU#128947 COVESA vsomeip excessive memory allocation in reliable (TCP) endpoint buffer handling
2026-10-22 2026-10-22 2026-10-22 VU#763488 Memory corruption vulnerabilities in PHP
2026-10-20 2026-10-20 2026-10-27 VU#645818 Xerj Console API authentication bypass leads to unauthorized credential minting
2026-10-14 2026-10-14 2026-10-27 VU#410595 Google BoringSSL Name Constraints bypass in SAN validation logic
2026-10-14 2026-10-14 2026-10-27 VU#948176 Multiple TLS libraries can bypass delegation enforcement
2026-10-14 2026-10-14 2026-10-14 VU#166125 Bisheng has authentication bypass vulnerabilities

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis