search menu icon-carat-right cmu-wordmark

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2018-03-19 2012-03-20 2018-04-04 VU#306792 1.7 Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions
2018-03-27 2018-02-07 2018-03-27 VU#184077 8.7 Navarino Infinity web interface is affected by multiple vulnerabilities.
2012-07-24 2012-07-20 2018-03-21 VU#108471 7.9 Symantec Web Gateway contains multiple vulnerabilities
2017-02-15 2017-02-15 2018-02-27 VU#614751 4.7 Hughes satellite modems contain multiple vulnerabilities
2018-02-15 2018-02-15 2018-02-19 VU#940439 7.3 Quagga bgpd is affected by multiple vulnerabilities
2017-10-02 2017-10-02 2018-02-02 VU#973527 8.7 Dnsmasq contains multiple vulnerabilities
2018-02-01 2018-02-01 2018-02-01 VU#319904 3.0 Pulse Secure Linux client GUI fails to validate SSL certificates
2017-10-12 2017-10-12 2018-01-22 VU#590639 5.5 NXP Semiconductors MQX RTOS contains multiple vulnerabilities
2017-05-02 2017-05-01 2017-12-21 VU#491375 5.5 Intel Active Management Technology (AMT) does not properly enforce access control
2017-11-29 2017-11-13 2017-11-30 VU#113765 4.6 Apple MacOS High Sierra disabled account authentication bypass
2017-11-21 2017-11-21 2017-11-21 VU#681983 1.3 Install Norton Security for Mac does not verify SSL certificates
2017-11-15 2017-11-14 2017-11-20 VU#421280 5.5 Microsoft Office Equation Editor stack buffer overflow
2016-11-21 2016-11-21 2017-11-20 VU#633847 6.1 NTP.org ntpd contains multiple denial of service vulnerabilities
2017-11-17 2017-11-16 2017-11-20 VU#817544 0 Windows 8 and later fail to properly randomize every application if system-wide mandatory ASLR is enabled via EMET or Windows Defender Exploit Guard
2017-10-16 2017-10-16 2017-11-16 VU#228519 5.7 Wi-Fi Protected Access (WPA) handshake traffic can be manipulated to induce nonce and session key reuse

Sponsored by CISA.