search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2005-04-27 2005-04-12 2005-04-28 VU#948486 Oracle products contain multiple vulnerabilities
2006-04-20 2006-04-18 2006-04-20 VU#619194 Oracle Order Capture vulnerability
2006-06-14 2006-06-11 2006-08-24 VU#817108 Yahoo! Mail script injection vulnerability
2005-02-08 2005-02-08 2005-02-09 VU#823971 Microsoft Internet Explorer contains a Channel Definition Format (CDF) cross-domain vulnerability
2004-02-27 2004-02-06 2004-02-27 VU#240174 Oracle9i Database contains buffer overflow in TIME_ZONE session parameter
2002-03-28 2002-02-19 2002-07-29 VU#619707 Microsoft SQL Server contains buffer overflows in openrowset and opendatasource macros
2002-07-31 2001-02-13 2002-07-31 VU#161576 Certain implementations of SSH1 may reveal internal cryptologic state
2011-10-10 2011-10-10 2011-10-10 VU#924307 D-Link DIR-685 Xtreme N storage router WPA/WPA2 encryption failure
2004-03-24 2004-03-22 2004-04-05 VU#792286 Ethereal fails to properly handle a zero-length Presentation protocol selector
2005-01-26 2005-01-26 2005-01-26 VU#689326 Cisco IOS vulnerable to DoS via malformed BGP packet
2007-01-18 2006-12-19 2007-04-05 VU#447772 Mozilla JavaScript Engine multiple memory corruption vulnerabilities
2002-08-05 2002-07-16 2002-10-02 VU#212707 Multiple vendor implementations of file scanning utilities vulnerable to DoS via compressed file archive
2001-10-03 2001-10-02 2004-03-24 VU#595507 Common Desktop Environment (CDE) ToolTalk RPC Server rpc.ttdbserverd contains format string vulnerability
2008-05-09 2008-05-09 2009-12-28 VU#829876 Microsoft Outlook Web Access not may use correct HTTP directive
2007-03-06 2007-03-06 2007-03-19 VU#861817 Apple QuickTime UDTA atom integer overflow

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis