search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2016-05-04 2016-05-03 2016-05-04 VU#250519 7.3 ImageMagick does not properly validate input before processing images using a delegate
2016-05-13 2016-05-13 2016-05-13 VU#785823 4.9 Lantronix xPrintServer contains multiple vulnerabilities
2016-05-17 2016-05-17 2016-05-17 VU#586503 5.9 Chef Manage deserializes cookie data insecurely
2016-05-19 2016-05-11 2016-06-14 VU#204232 4.6 Up.time agent for Linux does not authenticate a user before allowing read access to the file system
2016-05-26 2016-05-26 2016-05-26 VU#482135 2.0 MEDHOST Perioperative Information Management System contains hard-coded database credentials
2016-06-01 2016-06-01 2016-12-21 VU#754056 5.8 Fonality contains a hard-coded password and embedded SSL private key
2016-06-02 2016-06-02 2016-06-06 VU#321640 6.4 NTP.org ntpd is vulnerable to denial of service and other vulnerabilities
2016-06-10 2016-06-10 2016-07-01 VU#778696 5.6 Netgear D6000 and D3600 contain hard-coded cryptographic keys and are vulnerable to authentication bypass
2016-06-15 2016-06-14 2016-06-16 VU#748992 7.1 Adobe Flash memory corruption vulnerability
2016-06-20 2016-06-20 2016-06-20 VU#143335 4.0 mDNSResponder contains multiple memory-based vulnerabilities
2016-06-23 2016-06-23 2016-06-23 VU#302544 3.0 Alertus Desktop Notification for OS X sets insecure permissions for configuration and other files
2016-07-05 2016-07-05 2016-07-05 VU#690343 3.4 Acer Portal app for Android does not properly validate SSL certificates
2016-07-12 2016-07-12 2016-07-12 VU#123799 4.4 libbpg contains a type confusion vulnerability that leads to out of bounds write
2016-07-13 2016-07-13 2016-07-13 VU#665280 3.5 Accela Civic Platform Citizen Access portal contains multiple vulnerabilities
2016-07-18 2016-07-18 2016-07-19 VU#797896 1.1 CGI web servers assign Proxy header values from client requests to internal HTTP_PROXY environment variables

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis