search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2019-01-28 2019-01-21 2019-06-21 VU#465632 7.5 Microsoft Exchange server 2013 and newer are vulnerable to NTLM relay attacks
2019-06-20 2019-06-17 2019-07-08 VU#905115 5.0 Multiple TCP Selective Acknowledgement (SACK) and Maximum Segment Size (MSS) networking vulnerabilities may cause denial-of-service conditions in Linux and FreeBSD kernels
2018-05-08 2018-05-08 2019-07-11 VU#631579 5.3 Hardware debug exception documentation may result in unexpected behavior
2019-07-17 2019-07-16 2019-07-17 VU#790507 3.9 Oracle Solaris vulnerable to arbitrary code execution via /proc/self
2019-08-01 2019-07-18 2019-08-01 VU#489481 0 Cylance Antivirus Products Susceptible to Concatenation Bypass
2019-09-06 2019-09-06 2019-09-18 VU#672565 5.9 Exim fails to properly handle trailing backslashes in string_interpret_escape()
2019-10-09 2019-10-09 2019-10-11 VU#719689 6.9 Multiple vulnerabilities found in the Cobham EXPLORER 710 satcom terminal
2019-10-16 2019-04-28 2019-10-23 VU#927237 8.2 Pulse Secure VPN contains multiple vulnerabilities
2019-10-23 2019-10-03 2019-10-25 VU#766427 6.7 Multiple D-Link routers vulnerable to remote command execution
2019-10-09 2019-10-09 2019-10-25 VU#763073 1.8 iTerm2 with tmux integration is vulnerable to remote command execution
2018-11-06 2018-11-05 2019-11-14 VU#395981 4.0 Self-encrypting hard drives do not adequately protect data
2019-11-01 2019-10-31 2019-11-15 VU#125336 4.4 Microsoft Office for Mac cannot properly disable XLM macros
2019-08-13 2019-08-13 2019-11-19 VU#605641 6.3 HTTP/2 implementations do not robustly handle abnormal traffic and resource exhaustion
2019-12-19 2019-12-19 2019-12-19 VU#873161 3.8 Telos Automated Message Handling System contains multiple vulnerabilities
2020-01-14 2020-01-14 2020-01-14 VU#335217 4.9 Content Delivery Networks handle HTTP headers in different and unexpected ways

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis