search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2012-11-02 2012-10-22 2012-11-02 VU#111708 3.7 Fortigate UTM appliances share the same default CA certificate
2014-09-03 2012-10-16 2016-11-08 VU#582497 7.5 Multiple Android applications fail to properly validate SSL certificates
2012-10-15 2012-10-15 2012-11-01 VU#332412 6.1 Novell ZENworks Asset Management 7.5 web console information disclosure vulnerability
2012-10-30 2012-10-08 2012-10-30 VU#207540 5.5 TomatoCart with PayPal Express Checkout design flaw vulnerability
2012-10-10 2012-10-08 2012-10-23 VU#265532 7.9 Multi-vendor IP camera web interface authentication bypass
2012-10-22 2012-10-07 2012-10-22 VU#841851 0.6 Mutiny Technology virtual appliance command injection vulnerability
2012-10-04 2012-09-26 2012-10-04 VU#989684 0.9 Cerberus FTP Server web interface cross-site request forgery vulnerability
2012-09-24 2012-09-24 2012-09-25 VU#555668 5.8 JAMF Software Casper Suite contains a cross-site request forgery vulnerability
2012-09-27 2012-09-20 2012-09-27 VU#950795 2 Trend Micro Control Manager adhoc query vulnerability
2013-08-02 2012-09-20 2013-08-08 VU#987798 3.2 BREACH vulnerability in compressed HTTPS
2012-09-17 2012-09-17 2012-09-17 VU#389795 4.6 Windows Phone 7 does not check certificate Common Names when sending or receiving emails over SSL.
2012-09-17 2012-09-17 2012-09-17 VU#591667 1.7 CoSoSys Endpoint Protector 4 appliance contains a predictable password for root-equivalent account vulnerability
2012-09-17 2012-09-17 2012-09-21 VU#480095 6.9 Microsoft Internet Explorer 6/7/8/9 contain a use-after-free vulnerability
2012-09-18 2012-09-17 2013-05-15 VU#459446 4 osCommerce v2.3.1 with PayPal website payments standard module v1.0 design vulnerability
2012-09-13 2012-09-13 2014-08-15 VU#471364 1.4 Trend Micro InterScan Messaging Security Suite is vulnerable to XSS and CSRF vulnerabilities

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis