search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2010-11-30 2010-11-19 2010-11-30 VU#479900 PHP getSymbol vulnerability allows denial of service
2001-05-01 2001-02-28 2002-03-05 VU#645400 Cisco IOS/CatOS exposes read-write SNMP community string via traversal of View-based Access Control MIB (VACM) using read-only community string
2003-10-09 2003-10-06 2003-10-09 VU#368300 Hummingbird CyberDOCS vulnerable to SQL injection
2006-12-07 2006-09-07 2006-12-07 VU#542197 The Ipswitch IMail Server is vulnerable to a buffer overflow
2004-08-27 2004-03-19 2004-08-27 VU#524497 isakmpd crashes when handling ISAKMP packets with malformed "Delete Payload"
2007-01-09 2007-01-09 2007-01-26 VU#476900 Microsoft Outlook fails to properly process a VEVENT record
2007-05-25 2007-05-24 2007-05-29 VU#116100 Apple Mac OS X iChat UPnP buffer overflow
2007-08-13 2007-07-16 2007-08-13 VU#916897 InterActual Player IAMCE ActiveX control stack buffer overflow
2008-01-31 2008-01-10 2008-01-31 VU#888209 Liferay Portal Forgot Password User-Agent HTTP header XSS
2007-07-11 2007-07-11 2007-07-11 VU#213697 Symantec Backup Exec contains heap overflow in RPC interface
2007-01-09 2006-12-20 2007-02-20 VU#939609 Sun Java JRE vulnerable to arbitrary code execution via an unspecified error
2006-12-18 2006-12-06 2007-02-06 VU#427009 GnuPG vulnerable to remote data control
2005-07-13 2005-07-13 2005-07-20 VU#372797 WebEOC contains multiple SQL injection vulnerabilities
2007-07-06 2007-06-25 2009-01-16 VU#871497 Lhaca buffer overflow vulnerability
2006-02-09 2005-09-28 2006-05-17 VU#693909 PAM-MySQL contains a double-free vulnerability

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis