Skip to content
Noroxi

cmu records

16 published records for vendor cmu.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
62.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 25
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-1999-0799
    41Plan

    Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location.

    CriticalCVSS 10.0No exploitEPSS 2%

    cmu · bootpdJun 1, 1997

  • CVE-2022-31506
    37Monitor

    The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used

    CriticalCVSS 9.3No exploitEPSS 2%

    cmu · opendiamondJul 10, 2022

  • CVE-2025-27092
    34Monitor

    Path Traversal Vulnerability in GHOSTS Photo Retrieval Endpoint

    HighCVSS 8.7No exploitEPSS 1%

    cmu · ghostsFeb 19, 2025

  • CVE-2011-3208
    32Monitor

    Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 al

    HighCVSS 7.5No exploitEPSS 5%

    cmu · cyrus imap serverSep 14, 2011

  • CVE-2009-0663
    31Monitor

    Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl might allow context-dependent attackers to exe

    HighCVSS 7.5No exploitEPSS 4%

    perl · perlApr 30, 2009

  • CVE-2026-35467
    30Monitor

    Private Key stored as extractable in browser IndexeDB

    HighCVSS 7.5No exploitEPSS 0%

    cmu · cveclientApr 2, 2026

  • CVE-2026-22189
    27Monitor

    Panda3D <= 1.10.16 egg-mkfont Stack Buffer Overflow

    MediumCVSS 6.9No exploitEPSS 1%

    cmu · panda3dJan 7, 2026

  • CVE-2026-22188
    27Monitor

    Panda3D <= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca()

    MediumCVSS 6.9No exploitEPSS 0%

    cmu · panda3dJan 7, 2026

  • CVE-2026-35466
    24Monitor

    Stored XSS via unsanitized input from remote service

    MediumCVSS 6.1No exploitEPSS 0%

    cmu · cveclientApr 2, 2026

  • CVE-2011-1926
    21Monitor

    The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attac

    MediumCVSS 5.1No exploitEPSS 4%

    cmu · cyrus imap serverMay 23, 2011

  • CVE-2014-7723
    21Monitor

    The Carnegie Mellon Silicon Valley (aka edu.cmu.sv.mobile) application 0.1 for Android does not verify X.509 certificates from SSL servers,

    MediumCVSS 5.4No exploitEPSS 0%

    cmu · carnegie mellon silicon valleyOct 21, 2014

  • CVE-2026-22190
    20Monitor

    Panda3D <= 1.10.16 egg-mkfont Format String Information Disclosure

    MediumCVSS 5.1No exploitEPSS 0%

    cmu · panda3dJan 7, 2026

  • CVE-2013-4122
    18Monitor

    Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as impleme

    MediumCVSS 4.3No exploitEPSS 4%

    cmu · cyrus-saslOct 26, 2013

  • CVE-2011-3481
    18Monitor

    The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote atta

    MediumCVSS 4.3No exploitEPSS 2%

    cmu · cyrus imap serverSep 14, 2011

  • CVE-2009-2632
    17Monitor

    Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1

    MediumCVSS 4.4No exploitEPSS 0%

    cmu · cyrus imap serverSep 8, 2009

  • CVE-2014-0027
    13Monitor

    The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tm

    LowCVSS 3.3No exploitEPSS 0%

    cmu · fliteJan 25, 2014