search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2014-12-15 2014-12-15 2014-12-17 VU#343060 1.5 CA LISA Release Automation contains multiple vulnerabilities
2014-12-18 2014-12-18 2014-12-18 VU#843044 6.4 Multiple Dell iDRAC IPMI v1.5 implementations use insufficiently random session ID values
2014-12-19 2014-12-12 2015-01-07 VU#1680209 0 AppsGeyser generates Android applications that fail to properly validate SSL certificates
2014-12-19 2014-12-19 2015-10-27 VU#852879 5.9 NTP Project Network Time Protocol daemon (ntpd) contains multiple vulnerabilities (Updated)
2014-12-19 2014-12-19 2017-05-09 VU#561444 6.4 Multiple broadband routers use vulnerable versions of Allegro RomPager
2015-01-05 2014-12-28 2015-02-03 VU#533140 3.8 Tianocore UEFI implementation reclaim function vulnerable to buffer overflow
2015-01-05 2014-12-28 2015-07-23 VU#766164 5.3 Intel BIOS locking mechanism contains race condition that enables write protection bypass
2015-01-05 2014-12-28 2015-08-03 VU#976132 5.6 UEFI implementations do not properly secure the EFI S3 Resume Boot Path boot script
2015-01-13 2014-12-11 2015-01-13 VU#117604 1.0 Panasonic Arbitrator Back-End Server (BES) uses unencrypted communication
2015-01-16 2015-01-16 2015-01-21 VU#936356 6.8 Ceragon FiberAir IP-10 Microwave Bridge contains a default root password
2015-01-21 2015-01-21 2015-01-21 VU#110652 5.0 iPass Open Mobile Windows Client contains a remote code execution vulnerability
2015-01-23 2015-01-23 2015-01-29 VU#637068 5.8 LabTech contains privilege escalation vulnerability
2015-01-23 2015-01-23 2015-01-23 VU#546340 2.5 QPR Portal contains multiple vulnerabilities
2015-01-28 2015-01-28 2015-10-22 VU#967332 5.9 GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow
2015-02-02 2015-02-02 2015-02-02 VU#522460 5.9 SerVision HVG Video Gateway web interface contains multiple vulnerabilities

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis