search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2002-08-01 2002-06-26 2002-08-28 VU#542971 Multiple vendors' Domain Name System (DNS) stub resolvers vulnerable to buffer overflow via network name and address lookups
2006-06-13 2006-06-13 2006-06-13 VU#909508 Microsoft Graphics Rendering Engine fails to properly handle WMF images
2003-08-26 2003-08-20 2003-09-03 VU#813208 Microsoft Internet Explorer does not properly render input type tag
2008-02-11 2008-02-07 2008-02-11 VU#309608 Mozilla products may allow directory traversal
2005-02-08 2005-02-08 2005-02-09 VU#823971 Microsoft Internet Explorer contains a Channel Definition Format (CDF) cross-domain vulnerability
2002-08-12 2002-08-14 2004-02-09 VU#287771 Multiple vendors' Internet Key Exchange (IKE) implementations do not properly handle IKE response packets
2002-06-13 2002-05-27 2002-06-25 VU#855811 Microsoft Remote Access Service API contains additional buffer overflow vulnerability via phonebook entries
2005-10-11 2005-10-11 2005-10-11 VU#922708 Microsoft Windows Shell fails to handle shortcut files properly
2001-01-10 2001-01-09 2001-01-11 VU#247371 Borland/Inprise Interbase SQL database server contains backdoor superuser account with known password
2006-11-30 2006-11-17 2007-03-19 VU#198908 Adobe Acrobat AcroPDF ActiveX control fails to properly handle malformed input
2002-06-25 2002-06-12 2002-08-08 VU#811371 Microsoft SQLXML ISAPI filter vulnerable to buffer overflow via contenttype parameter
2006-08-07 2006-07-28 2007-05-31 VU#230208 Intel Centrino wireless network drivers fail to properly handle malformed frames
2011-05-31 2011-05-31 2011-05-31 VU#987308 HP LoadRunner buffer overflow vulnerability
2006-06-14 2006-06-11 2006-08-24 VU#817108 Yahoo! Mail script injection vulnerability
2001-06-21 2001-06-08 2001-09-06 VU#952171 Hewlett Packard OpenView and Tivoli NetView do not adequately validate SNMP trap arguments

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis