Skip to content
OpenAdvisories

Vendor

CERT/CC

12 known vulnerabilities.

Products

VINCE 5 VINCE - The Vulnerability Information and Coordination Environment 4 VINCE - Vulnerability Information and Coordination Environment 1 cveClient/encrypt-storage.js 1 cveClient/cveInterface.js 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-35467

    Private Key stored as extractable in browser IndexeDB

    The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.

    CERT/CC cveClient/encrypt-storage.js
  • High 8.8
    CVE-2022-40238

    A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5

    A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inject arbitrary pickle object as part of a user's profile. This can lead to code execution on the server when the user's profile is accessed.

    CERT/CC VINCE - The Vulnerability Information and Coordination Environment