search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2006-06-29 2006-06-28 2006-07-04 VU#544484 Cisco Access Point Web Browser Interface contains a vulnerability
2001-08-21 2000-11-04 2001-08-21 VU#960877 Red Hat linux restore uses insecure environment variables allowing root compromise
2006-06-06 2006-05-18 2006-06-07 VU#466428 Skype URI handler fails to properly parse parameters
2006-02-14 2006-02-14 2006-02-19 VU#839284 Microsoft Windows TCP/IP fails to properly validate IGMP packets
2004-08-04 2004-08-04 2005-06-14 VU#388984 libpng fails to properly check length of transparency chunk (tRNS) data
2005-02-08 2005-02-08 2005-02-08 VU#927889 Microsoft OLE buffer overflow
2006-04-20 2006-04-18 2006-04-20 VU#824833 Oracle Application Object Library vulnerability
2003-06-24 2003-05-28 2003-09-18 VU#479268 Apache HTTPD contains denial of service vulnerability in basic authentication module
2006-04-11 2006-04-11 2006-11-02 VU#234812 RDS.Dataspace ActiveX control bypasses ActiveX security model
2008-01-15 2008-01-15 2008-07-22 VU#347812 UPnP enabled by default in multiple devices
2006-03-17 2006-03-13 2006-03-29 VU#980084 Apple Mail buffer overflow vulnerability
2006-10-11 2006-10-02 2006-11-08 VU#788860 Trend Micro OfficeScan Management Console ActiveX control format string vulnerability
2007-08-28 2007-08-28 2009-04-13 VU#474433 Oracle JInitiator ActiveX control stack buffer overflows
2003-07-18 1998-05-21 2004-02-23 VU#12212 Weaknesses in MIT magic cookie and XDM X Windows authorization
2007-01-09 2007-01-09 2007-01-26 VU#271860 Microsoft Outlook fails to properly parse Office Saved Searches (.oss) files

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis