search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2006-05-30 2006-05-30 2006-06-07 VU#921017 Secure Elements Class 5 AVR client sends messages in cleartext
2001-04-10 2001-04-10 2001-04-11 VU#490344 Alcatel ADSL modems provide unauthenticated TFTP access via physical WAN interface
2004-03-16 2004-03-11 2004-03-17 VU#831534 cPanel fails to verify input passed to the "user" parameter
2000-11-20 2000-10-10 2001-09-18 VU#111677 Microsoft IIS 4.0 / 5.0 vulnerable to directory traversal via extended unicode in url
2001-07-02 1991-07-17 2007-04-24 VU#10277 Various shells create temporary files insecurely when using << operator
2007-01-24 2007-01-24 2007-02-02 VU#217912 Cisco IOS fails to properly process TCP packets
2002-12-13 2002-11-20 2003-05-16 VU#958321 Samba contains a remotely exploitable stack buffer overflow
2002-07-30 2002-07-30 2002-09-30 VU#748355 ASN.1 parsing errors exist in implementations of SSL, TLS, S/MIME, PKCS#7 routines
2001-09-20 2000-06-14 2002-01-10 VU#984555 Default installations of the Lotus Domino web server disclose system information via HTTP headers
2002-09-27 2001-10-15 2002-09-27 VU#341539 Novell GroupWise Server web-based front-end does not adequately validate user input thereby allowing directory traversal
2006-05-30 2006-05-30 2007-05-04 VU#487617 Secure Elements Class 5 AVR server fails to properly authenticate session start messages
2008-08-19 2008-08-11 2008-08-19 VU#343355 Apache Tomcat UTF8 Directory Traversal Vulnerability
2001-09-18 2001-06-07 2001-09-18 VU#573155 Microsoft Windows 2000 Telnet Service searches all trusted domains for user accounts
2001-03-02 2001-03-01 2001-03-11 VU#176972 Lotus Domino SMTP Server Allows Anonymous Relay of Quoted Addresses
2001-05-11 2000-11-07 2002-01-25 VU#198355 ISC BIND 8.2.2-P6 vulnerable to DoS when processing SRV records, aka the "srv bug"

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis