Vendor
Panda3D
16 known vulnerabilities in products by Panda3D, 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-31506 | Panda3D Opendiamond: Path Traversal | 9.3 | |
| Critical | CVE-2026-22189 | Panda3D <= 1.10.16 egg-mkfont Stack Buffer Overflow | 9.8 | |
| High | CVE-2025-27092 | Path Traversal Vulnerability in GHOSTS Photo Retrieval Endpoint | 7.5 | |
| Not rated | CVE-2011-3208 | Carnegie Mellon University Cyrus IMAP Server: Stack-Based Buffer Overflow | — | |
| Not rated | CVE-2009-0663 | Panda3D Dbd\: Heap-Based Buffer Overflow | — | |
| Not rated | CVE-2011-1926 | Carnegie Mellon University Cyrus IMAP Server: Command Injection | — | |
| Not rated | CVE-2013-4122 | Carnegie Mellon University Cyrus SASL: NULL Pointer Dereference | — | |
| High | CVE-2026-22190 | Panda3D <= 1.10.16 egg-mkfont Format String Information Disclosure | 7.5 | |
| High | CVE-2026-35467 | Private Key stored as extractable in browser IndexeDB | 7.5 | |
| Not rated | CVE-2011-3481 | Carnegie Mellon University Cyrus IMAP Server: NULL Pointer Dereference | — | |
| Not rated | CVE-1999-0799 | Panda3D Bootpd: Buffer Overflow | — | |
| Medium | CVE-2026-22188 | Panda3D <= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca() | 5.5 | |
| Medium | CVE-2026-35466 | Stored XSS via unsanitized input from remote service | 6.1 | |
| Not rated | CVE-2009-2632 | Carnegie Mellon University Cyrus IMAP Server: Buffer Overflow | — | |
| Not rated | CVE-2014-0027 | Carnegie Mellon University Flite: security vulnerability | — | |
| Not rated | CVE-2014-7723 | cmu Carnegie Mellon Silicon Valley (aka edu.cmu.sv.mobile) for android: Information Disclosure | — |
Products
| Carnegie Mellon University Cyrus IMAP Server | 4 | 0 |
| Panda3D | 3 | 0 |