search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2018-11-01 2018-11-01 2019-01-07 VU#317277 4.6 Texas Instruments CC2640 and CC2650 microcontrollers vulnerable to heap overflow and insecure update
2018-04-10 2018-04-10 2019-01-10 VU#974272 4.1 Microsoft Outlook retrieves remote OLE content without prompting
2018-12-20 2018-12-21 2019-01-15 VU#741315 4.3 Dokan file system driver contains a stack-based buffer overflow
2019-01-04 2018-11-12 2019-01-24 VU#289907 5.0 Microsoft Windows Kernel Transaction Manager (KTM) is vulnerable to a race condition
2018-12-13 2018-12-12 2019-01-28 VU#756913 0.8 Pixar Tractor contains a stored cross-site scripting vulnerability
2018-08-21 2018-02-21 2019-03-13 VU#332928 6.8 Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities
2019-04-08 2019-04-08 2019-04-08 VU#174715 1.6 MyCar Controls uses hard-coded credentials
2019-02-05 2018-11-21 2019-04-19 VU#730261 4.6 Marvell Avastar wireless SoCs have multiple vulnerabilities
2019-04-17 2019-04-15 2019-04-23 VU#166939 4.0 Broadcom WiFi chipset drivers contain multiple vulnerabilities
2019-04-11 2019-04-10 2019-04-24 VU#192371 4.5 VPN applications insecurely store session cookies
2019-05-14 2019-05-13 2019-05-16 VU#400865 6.8 Cisco Trust Anchor module (TAm) improperly checks code and Cisco IOS XE web UI does not sanitize user input
2019-05-03 2019-05-03 2019-05-22 VU#169249 7.8 PrinterLogic Print Management Software fails to validate SSL certificates or the integrity of software updates.
2019-06-01 2019-06-01 2019-06-03 VU#877837 5.5 Multiple vulnerabilities in Quest Kace System Management Appliance
2019-04-12 2019-04-10 2019-06-05 VU#871675 7.0 WPA3 design issues and implementation vulnerabilities in hostapd and wpa_supplicant
2019-05-22 2019-05-21 2019-06-12 VU#119704 6.4 Microsoft Windows Task Scheduler SetJobFileSecurityByName privilege escalation vulnerability

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis