search menu icon-carat-right cmu-wordmark

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2020-08-20 2020-08-20 2020-08-21 VU#815655 NCR SelfServ ATM BNA contains multiple vulnerabilities
2020-08-20 2020-08-20 2020-08-20 VU#116713 NCR SelfServ ATM dispenser software contains multiple vulnerabilities
2020-07-29 2020-07-29 2020-08-13 VU#174059 GRUB2 bootloader is vulnerable to buffer overflow
2020-07-08 2020-06-30 2020-07-13 VU#290915 F5 BIG-IP contains multiple vulnerabilities including unauthenticated remote command execution
2020-06-26 2020-06-26 2022-02-28 VU#576779 Netgear httpd upgrade_check.cgi stack buffer overflow
2020-06-16 2020-06-16 2022-09-20 VU#257161 Treck IP stacks contain multiple vulnerabilities
2020-06-08 2020-06-08 2020-07-08 VU#339275 Universal Plug and Play (UPnP) SUBSCRIBE can be abused to send traffic to arbitrary destinations
2020-06-02 2020-06-01 2020-09-30 VU#636397 IP-in-IP protocol routes arbitrary traffic by default
2020-05-26 2020-05-23 2020-07-09 VU#127371 6.8 iOS, iPadOS, tvOS, watchOS, and macOS contain a double-free vulnerability in the XNU kernel lio_listio() function
2020-05-18 2020-05-18 2020-05-26 VU#534195 0 Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable to method confusion attacks
2020-05-18 2020-04-14 2021-02-10 VU#647177 4.8 Bluetooth devices supporting BR/EDR are vulnerable to impersonation attacks
2020-05-14 2020-01-28 2020-05-15 VU#366027 7.8 Samsung Qmage codec for Android Skia library does not properly validate image files
2020-04-06 2020-04-06 2020-04-15 VU#660597 0.9 Periscope BuySpeed is vulnerable to stored cross-site scripting
2020-03-30 2020-03-30 2020-03-30 VU#962085 0.9 Versiant LYNX Customer Service Portal is vulnerable to stored cross-site scripting
2020-03-30 2019-04-12 2020-03-30 VU#944837 6.7 Vertiv Avocent UMG-4000 vulnerable to command injection and cross-site scripting vulnerabilities

Sponsored by CISA.