search
menu
icon-carat-right
cmu-wordmark
×
Home
Notes
Search
Report a Vulnerability
Disclosure Guidance
VINCE
Carnegie Mellon University
Software Engineering Institute
CERT Coordination Center
Home
Notes
Search
Report a Vulnerability
Disclosure Guidance
VINCE
Home
Current:
Notes
CERT/CC Vulnerability Notes Database
Published
Public
Updated
ID
CVSS
Title
2026-03-12
2026-03-12
2026-03-12
VU#907705
Graphql-upload-minimal has a prototype pollution vulnerability.
2026-03-12
2026-03-12
2026-03-12
VU#665416
SGLang (sglang) is vulnerable to code execution attacks via unsafe pickle deserialization
2026-03-09
2004-12-10
2026-03-09
VU#976247
Antivirus and Endpoint Detection and Response Archive Scanning Engines may not properly scan malformed zip archives
2026-03-05
2026-02-18
2026-03-05
VU#772695
A flawed TLS handshake implementation affects Viber Proxy in multiple platforms
2026-03-02
2026-03-02
2026-03-02
VU#431821
MS-Agent does not properly sanitize commands sent to its shell tool, allowing for RCE
2025-10-03
2025-10-03
2026-03-02
VU#294418
Vigor routers running DrayOS are vulnerable to RCE via EasyVPN and LAN web administration interface
2026-02-12
2026-02-12
2026-02-23
VU#504749
PyMuPDF path traversal and arbitrary file write vulnerabilities
2025-06-10
2025-06-10
2026-02-13
VU#806555
A Vulnerability in UEFI Applications allows for secure boot bypass via misused NVRAM variable
2026-02-10
2026-02-10
2026-02-10
VU#458422
CASL Ability contains a prototype pollution vulnerability
2026-01-20
2026-01-20
2026-01-27
VU#481830
Libheif uncompressed codec lacks bounds check leading to application crash
2026-01-20
2026-01-20
2026-01-21
VU#102648
Code injection vulnerability in binary-parser library
2026-01-20
2026-01-20
2026-01-20
VU#458022
Open5GS WebUI uses a hard-coded secrets including JSON Web Token signing key
2026-01-20
2026-01-20
2026-01-20
VU#244846
Server-Side Template Injection (SSTI) vulnerability exist in Genshi
2026-01-20
2026-01-20
2026-01-20
VU#271649
Stack-based buffer overflow in libtasn1 versions v4.20.0 and earlier
2026-01-20
2026-01-20
2026-01-20
VU#818729
Safetica contains a kernel driver vulnerability
Previous
You're on page
1
2
3
4
245
Next
Sponsored by
CISA.
Download PGP Key
Read CERT/CC Blog
Learn about Vulnerability Analysis