search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2026-04-23 2026-04-23 2026-05-26 VU#748485 Unauthenticated configuration modification vulnerability in Central Office Services - Content Hosting Component
2026-05-28 2026-05-28 2026-05-28 VU#780781 Casdoor contains multiple authentication bypass and access management vulnerabilities
2026-06-01 2026-06-01 2026-06-01 VU#158530 PCTCore64.sys Windows kernel driver contains missing access control vulnerability
2022-04-28 2022-04-28 2026-06-01 VU#730007 Tychon is vulnerable to privilege escalation due to OPENSSLDIR location
2026-06-02 2026-06-02 2026-06-02 VU#873170 Collibra Agent contains improper authentication and path traversal vulnerabilities
2026-06-02 2026-06-02 2026-06-02 VU#265691 Appsmiths SQL Query autocomplete renderer contains a cross site scripting vulnerability
2026-06-02 2026-06-02 2026-06-02 VU#615987 Missing IPsec Integrity Protection for IMS SIP Signaling in Verizon VoLTE Deployments
2026-06-11 2026-06-11 2026-06-15 VU#862559 crypton-x509-validation Haskell libraries do not enforce X.509 NameConstraints
2026-06-17 2026-06-17 2026-06-17 VU#380058 SignalRGB kernel driver contains improper access control and IOCTL vulnerabilities
2026-06-22 2026-06-22 2026-06-22 VU#936962 Multiple file parsing vulnerabilities in FastStone Image Viewer 8.3.0.0
2026-07-02 2026-07-02 2026-07-02 VU#639124 Multiple local privilege escalation vulnerabilities in Little Orbits GameFirst Anti-Cheat
2026-07-06 2026-07-06 2026-07-06 VU#828543 HP Deskjet 2800 Printer Series Webservers contain Missing Authorization Vulnerability
2026-06-22 2026-06-22 2026-07-06 VU#226679 Microsoft WinRE allows for bypass of UEFI/BIOS password enforcement
2026-07-08 2026-07-08 2026-07-08 VU#849433 Adalo Database API Enables Cross-App User Data Extraction via Over-Fetching and Missing Authorization Controls
2026-07-09 2026-07-09 2026-07-09 VU#734812 Xerte Online Toolkit contains an authentication bypass that allows for RCE

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis