search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2026-08-11 2026-08-11 2026-08-11 VU#431093 TCG TPM 2.0 reference code found vulnerable to information leakage and timing side-channel attacks
2026-07-29 2026-07-29 2026-08-11 VU#305509 OPeNDAP Hyrax is vulnerable to SSRF and Credential Disclosure
2026-08-10 2026-08-10 2026-08-10 VU#614868 Opencart ecommerce platform contains directory traversal vulnerability
2026-08-07 2026-08-07 2026-08-07 VU#987105 The nothings stb TrueType library, up to version 1.26, contains a heap buffer overflow vulnerability
2026-08-06 2026-08-06 2026-08-06 VU#487613 Alinto SOGo v5.12.7 vulnerable to cross-site scripting via malformed ICS calendar invitations
2026-07-22 2026-07-22 2026-08-05 VU#360868 Local Privilege escalation vulnerability in Analog Way Picturall Quad Compact Mark II version 3.5.8
2026-07-06 2026-07-06 2026-07-31 VU#213560 Tenda firmware (multiple versions) contains hidden authentication backdoor
2026-07-31 2026-07-31 2026-07-31 VU#243636 VPS.org one-click deployment templates contain multiple vulnerabilities
2026-07-30 2026-07-30 2026-07-30 VU#281278 SGLang contains six different vulnerabilities including RCE, data exfiltration, and credential disclosure
2026-07-30 2026-07-30 2026-07-30 VU#790363 foreUP golf management platform's web API contains multiple vulnerabilities
2026-07-29 2026-07-29 2026-07-29 VU#293714 Arbitrary File Overwrite in Develar app-builder (zipx.Unzip) via Symlink Following on macOS (APFS)
2026-07-28 2026-07-28 2026-07-28 VU#141367 AT&T's Arris BGW210-700 gateway contains authentication bypass vulnerability in LAN-side management interface
2025-01-30 2025-01-30 2026-07-27 VU#733789 ChatGPT-4o contains security bypass vulnerability through time and search functions called "Time Bandit"
2025-04-25 2025-04-25 2026-07-27 VU#667211 Various GPT services are vulnerable to two systemic jailbreaks, allows for bypass of safety guardrails
2026-07-16 2026-07-16 2026-07-23 VU#885548 Denial-of-service vulnerability in HTTP/2 servers via stalled flow-control conditions

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis