Known Vulnerabilities for products from Cmu

Listed below are 13 of the newest known vulnerabilities associated with the vendor "Cmu".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-22190 json The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains an uncontrolled format string vulnerability. ... Not Provided 2026-01-07 2026-05-26
CVE-2026-22189 json The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains a stack-based buffer overflow vulnerability d... Not Provided 2026-01-07 2026-05-26
CVE-2026-22188 json The deploy-stub component in Panda3D versions up to and including 1.10.16 contains a denial of service vulnerability due to u... Not Provided 2026-01-07 2026-05-26
CVE-2022-31506 json The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file fu... 9.3 - CRITICAL 2022-07-11 2022-07-15
CVE-2014-7723 json The Carnegie Mellon Silicon Valley (aka edu.cmu.sv.mobile) application 0.1 for Android does not verify X.509 certificates fro... Not Provided 2014-10-21 2026-05-06
CVE-2014-0027 json The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlin... Not Provided 2014-01-26 2026-04-29
CVE-2013-4122 json Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt func... Not Provided 2013-10-27 2026-04-29
CVE-2011-3481 json The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, all... Not Provided 2011-09-14 2026-04-29
CVE-2011-3208 json Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x b... Not Provided 2011-09-14 2026-04-29
CVE-2011-1926 json The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-t... Not Provided 2011-05-23 2026-04-29
CVE-2009-2632 json Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14... Not Provided 2009-09-08 2026-04-23
CVE-2009-0663 json Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl might allow context-dependent a... Not Provided 2009-04-30 2026-04-23
CVE-1999-0799 json Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location. Not Provided 1997-06-01 2025-04-03

Known software with vulnerabilities from Cmu

Type Vendor Product Version
ApplicationCmuCarnegie Mellon Silicon Valley0.1
ApplicationCmuCyrus-sasl1.5.28
ApplicationCmuCyrus Imap Server2.0.17
ApplicationCmuFlite1.4
ApplicationCmuIsilk0.1.6