search menu icon-carat-right cmu-wordmark

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2006-10-10 2006-10-10 2007-02-27 VU#706668 Microsoft Excel fails to properly process malformed DATETIME records
2004-11-23 2004-11-22 2004-11-23 VU#760344 Sun Java Plug-in fails to restrict access to private Java packages
2005-03-17 2005-03-17 2005-04-28 VU#581068 NotifyLink server provides inadequate protection for cryptographic key material
2007-05-02 2007-04-20 2007-05-02 VU#420668 Apple QuickTime for Java QTPointerRef heap memory corruption vulnerability
2005-07-06 2005-05-31 2005-07-11 VU#286468 Ettercap contains a format string error in the "curses_msg()" function
2003-03-17 2003-03-17 2003-05-30 VU#117394 Buffer Overflow in Core Microsoft Windows DLL
2006-08-10 2006-08-08 2006-08-10 VU#337244 Microsoft Windows Kernel vulnerable to privilege escalation
2007-08-28 2007-08-27 2007-08-28 VU#927905 BIND version 8 generates cryptographically weak DNS query identifiers
2005-07-12 2005-07-12 2005-07-22 VU#720742 Microsoft Color Management Module buffer overflow during profile tag validation
2011-05-25 2011-05-25 2011-05-25 VU#531342 Unbound DNS resolver denial of service vulnerability
2010-11-03 2010-11-03 2010-11-03 VU#465239 NetSupport Manager Gateway transmits identifying information in plaintext
2002-06-13 2002-05-27 2002-06-25 VU#855811 Microsoft Remote Access Service API contains additional buffer overflow vulnerability via phonebook entries
2011-04-05 2011-04-05 2011-04-05 VU#648244 Oracle Solaris 10 password hashes leaked through back-out patch files
2003-05-04 2003-02-03 2003-06-17 VU#911505 pam_xauth may insecurely forward "X MIT-Magic-Cookies" to new sessions
2002-01-31 2001-08-14 2002-01-31 VU#726891 Novell Groupwise contains protocol implementation vulnerability allowing email to be viewed by unauthorized user

Sponsored by CISA.