search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2013-04-26 2012-11-22 2016-01-13 VU#948155 2.0 Henry Schein Dentrix G5 uses hard-coded database credentials shared across multiple installations
2015-07-28 2015-07-21 2016-01-08 VU#924951 3.5 Android Stagefright contains multiple vulnerabilities
2016-01-07 2015-12-19 2016-01-07 VU#753264 5.9 IPSwitch WhatsUp Gold does not validate commands when deserializing XML objects
2016-01-05 2016-01-05 2016-01-05 VU#418072 4.2 Comcast XFINITY Home Security fails to properly handle wireless communications disruption
2015-08-31 2015-08-31 2016-01-04 VU#361684 3.7 Router devices do not implement sufficient UPnP authentication and security
2016-01-04 2015-01-04 2016-01-04 VU#820196 1.8 Furuno Voyage Data Recorder (VDR) moduleserv firmware update utility fails to properly sanitize user-provided input
2015-12-16 2015-12-16 2015-12-27 VU#176160 4.4 IPswitch WhatsUp Gold contains multiple XSS vulnerabilities and a SQLi
2015-12-21 2015-12-17 2015-12-22 VU#640184 6.2 Juniper ScreenOS contains multiple vulnerabilities
2015-12-18 2015-12-18 2015-12-18 VU#757840 1.5 Dovestones Software AD Self Password Reset fails to properly restrict password reset request to authorized users
2015-12-10 2015-12-10 2015-12-10 VU#167992 1.6 ReadyNet WRT300N-DD Wireless Router contains multiple vulnerabilities
2015-12-10 2015-12-10 2015-12-10 VU#763576 1.6 Amped Wireless R10000 router contains multiple vulnerabilities
2015-12-10 2015-12-10 2015-12-10 VU#403568 1.1 Netgear G54/N150 Wireless Router WNR1000v3 uses insufficiently random values for DNS queries
2015-12-10 2015-12-10 2015-12-10 VU#330000 1.6 ZyXEL NBG-418N router uses default credentials and is vulnerable to cross-site request forgery
2015-12-01 2015-11-30 2015-12-09 VU#630239 4.9 Epiphany Cardio Server is vulnerable to SQL and LDAP injection
2015-09-01 2015-09-01 2015-12-08 VU#903500 4.5 Seagate and LaCie wireless storage products contain multiple vulnerabilities

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis