search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2004-10-13 2004-10-12 2004-10-15 VU#119262 Microsoft Windows kernel fails to reset values in CPU data structures
2005-03-22 2002-02-02 2005-08-01 VU#273262 Multiple web browsers vulnerable to spoofing via Internationalized Domain Name support
2004-02-24 2004-02-18 2004-03-04 VU#513062 metamail contains multiple buffer overflow vulnerabilities
2000-12-14 1999-07-29 2001-08-10 VU#3062 Cenroll ActiveX Control allows creation of arbitrary files.
2004-03-30 2004-02-03 2004-04-05 VU#810062 Cisco 6000/6500/7600 series systems fail to properly process layer 2 frames
2000-09-26 1997-08-15 2001-06-26 VU#5962 Notes default ECL allows execution of unsigned code
2004-09-14 2004-09-14 2004-12-17 VU#297462 Microsoft Windows GDI+ contains a buffer overflow vulnerability in the JPEG parsing component
2004-06-02 2004-06-02 2004-06-28 VU#686862 MIT Kerberos 5 krb5_aname_to_localname() contains several heap overflows
2005-07-13 2005-07-12 2005-10-19 VU#613562 Oracle products contain multiple vulnerabilities
2003-12-18 2003-12-10 2003-12-23 VU#352462 Cisco ACNS contains buffer overflow vulnerability in the authentication module when supplied an overly long password
2005-07-13 2005-07-13 2005-07-20 VU#956762 WebEOC is vulnerable to a denial-of-service condition via uploading large files
2004-11-19 2004-10-05 2004-12-17 VU#557062 CUPS stores user account details in plain text in log file
2000-11-03 2001-01-18 2001-10-25 VU#565052 Passwords sent via SSH encrypted with RC4 can be easily cracked
2010-04-02 2010-03-30 2010-04-02 VU#507652 Oracle Sun Java fails to properly validate Java applet signatures
2001-04-10 2001-04-10 2001-06-26 VU#808552 Multiple ftpd implementations contain buffer overflows

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis