search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2003-07-28 2003-07-25 2003-09-12 VU#936868 Oracle Database Server contains stack overflow in logging mechanism when supplied overly long library name
2010-10-12 2010-01-06 2010-11-30 VU#538191 Ghostscript crashes when passing a null ipsp->ip value to the gs_type2_interpret function
2002-08-09 2002-04-03 2002-12-10 VU#128491 Macromedia Flash Player continues to download flash files until browser is closed
2001-12-13 1998-03-01 2001-12-18 VU#228186 Hot Standby Router Protocol (HSRP) uses weak authentication
2003-03-20 2003-03-15 2003-05-09 VU#623217 Cryptographic weakness in Kerberos Version 4 protocol
2003-04-04 2003-04-04 2003-06-27 VU#720017 Entrust Authority Security Manager (EASM) does not enforce multiple authorization requirement for master user password change
2002-10-11 2002-06-12 2003-08-05 VU#879386 Multiple buffer overflow vulnerabilities in QNX
2004-07-27 2004-07-21 2004-08-05 VU#548968 Multiple Cisco ONS control cards fail to properly handle malformed SNMP packets
2003-10-16 2003-10-15 2003-10-22 VU#967668 Microsoft Windows ListBox and ComboBox controls vulnerable to buffer overflow when supplied crafted Windows message
2006-12-05 2006-12-04 2006-12-05 VU#914617 Microsoft Windows Print Spooler service fails to properly handle RPC requests
2007-03-06 2007-03-06 2007-03-19 VU#861817 Apple QuickTime UDTA atom integer overflow
2004-03-24 2004-03-22 2004-04-05 VU#792286 Ethereal fails to properly handle a zero-length Presentation protocol selector
2005-04-27 2005-04-12 2005-04-28 VU#948486 Oracle products contain multiple vulnerabilities
2006-06-14 2006-06-11 2006-08-24 VU#817108 Yahoo! Mail script injection vulnerability
2002-09-26 2002-01-08 2002-09-26 VU#575619 Allaire Forums does not verify user information stored in hidden form fields

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis