search
menu
icon-carat-right
cmu-wordmark
×
Home
Notes
Search
Report a Vulnerability
Disclosure Guidance
VINCE
Carnegie Mellon University
Software Engineering Institute
CERT Coordination Center
Home
Notes
Search
Report a Vulnerability
Disclosure Guidance
VINCE
Home
Current:
Notes
CERT/CC Vulnerability Notes Database
Published
Public
Updated
ID
CVSS
Title
2026-09-23
2026-09-23
2026-09-23
VU#754548
Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers
2026-09-23
2026-09-23
2026-09-23
VU#273940
Enterprise Access Management EAM does not rotate RSA keys
2026-09-24
2026-09-24
2026-09-24
VU#676317
Norwegian Cruise Line door access controller contains an improper authentication vulnerability
2026-09-24
2026-09-24
2026-09-25
VU#234131
ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
2026-09-25
2026-09-25
2026-09-25
VU#699627
Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities
2026-09-28
2026-09-28
2026-09-28
VU#762428
Authlib library contains a signature‑verification bypass vulnerability
2026-10-01
2026-10-01
2026-10-01
VU#553437
InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations
2026-10-12
2026-10-12
2026-10-13
VU#162329
Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1
2026-10-13
2026-10-13
2026-10-15
VU#157374
XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE
2026-10-13
2026-10-13
2026-10-19
VU#573195
Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation
2026-10-13
2026-10-13
2026-10-14
VU#382143
Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration
2026-10-13
2026-10-13
2026-10-13
VU#456950
Komodo Periphery Agent Contains an OS Command Injection Vulnerability
2026-10-14
2026-10-14
2026-10-14
VU#166125
Bisheng has authentication bypass vulnerabilities
2026-10-14
2026-10-14
2026-10-19
VU#948176
Multiple TLS Libraries can Bypass Delegation Enforcement
2026-10-14
2026-10-14
2026-10-19
VU#410595
Google BoringSSL Name Constraints Bypass in SAN Validation Logic
Previous
1
247
248
249
You're on page
250
Next
Sponsored by
CISA.
Download PGP Key
Read CERT/CC Blog
Learn about Vulnerability Analysis