search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2002-09-18 2000-02-09 2002-09-18 VU#214555 Multiple vulnerabilities exist within credit card chips thereby allowing malicious user to bypass authentication mechanism
2006-10-11 2006-10-10 2006-10-31 VU#547212 Microsoft XML Core Services XMLHTTP ActiveX control fails to properly interpret certain HTTP operations
2002-09-09 2002-07-19 2002-09-09 VU#771155 HP Tru64 UNIX "ipcs" contains buffer overflow (SSRT0794U)
2002-03-29 2001-06-19 2004-02-23 VU#219043 Netwin Surge FTP Server does not adequately validate user input thereby allowing directory traversal
2007-02-26 2007-02-08 2007-03-01 VU#303012 HP Mercury products vulnerable to buffer overflow
2008-05-09 2008-05-09 2008-05-09 VU#468843 Microsoft Internet Explorer 7 DisableCachingOfSSLPages may not prevent caching
2001-09-10 2001-08-28 2001-11-30 VU#274043 BSD Line Printer Daemon vulnerable to buffer overflow via crafted print request
2001-11-06 2001-11-05 2001-11-06 VU#986843 WS-FTP Server vulnerable to buffer overflow via long string sent as argument to ftp command
2005-02-28 2005-02-28 2005-02-28 VU#795812 Gaim vulnerable to DoS via specially crafted HTML
2003-05-13 2003-04-28 2003-05-13 VU#641012 Kerio Personal Firewall vulnerable to replay attack
2008-06-18 2008-06-12 2009-04-13 VU#145313 Novell iPrint Client ActiveX control stack buffer overflows
2002-08-05 2001-09-10 2005-03-28 VU#177243 Mac OS X Finder creates world-readable ".FBCIndex" file thereby disclosing sensitive information
2006-02-28 2006-02-23 2006-02-28 VU#437212 Adobe Macromedia Shockwave Player ActiveX installer buffer overflow vulnerability
2002-09-18 2001-11-05 2002-09-18 VU#243243 Entrust GetAccess does not validate user input thereby allowing users to read arbitrary files
2001-05-15 2001-05-14 2001-09-18 VU#789543 IIS decodes filenames superfluously after applying security checks

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis