search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2003-09-19 1999-04-03 2003-09-19 VU#41870 Sun Solstice AdminSuite ships with insecure default configuration
2002-05-23 1999-02-22 2002-05-23 VU#28370 Taskpads ActiveX Control incorrectly marked safe-for-scripting
2002-04-29 1999-02-01 2003-03-26 VU#2558 File Transfer Protocol allows data connection hijacking via PASV mode race condition
2000-09-29 1999-01-03 2001-06-26 VU#18287 statd bounce vulnerability
2002-01-04 1998-08-31 2002-01-04 VU#5053 Older Versions of Cisco PIX Firewall Manager permits retrieval of files
2001-09-20 1998-07-27 2003-04-11 VU#5648 Buffer Overflows in various email clients
2002-01-04 1998-07-15 2002-01-04 VU#6733 PIX 'established' and 'conduit' command may have unexpected interactions
2001-09-26 1998-07-06 2001-09-26 VU#182777 IBM AIX nslookup buffer overflow in lex routines
2001-11-07 1998-06-11 2003-05-20 VU#13877 Weak CRC allows packet injection into SSH sessions encrypted with block ciphers
2003-07-18 1998-05-21 2004-02-23 VU#12212 Weaknesses in MIT magic cookie and XDM X Windows authorization
2001-04-13 1998-04-02 2001-08-10 VU#17215 SGI systems may execute commands embedded in mail messages
2001-11-15 1998-03-24 2001-11-15 VU#4923 Windows NT SNMP agent leaks memory
2010-08-25 1998-03-18 2016-10-13 VU#707943 0 Microsoft Windows based applications may insecurely load dynamic libraries
2001-12-13 1998-03-01 2001-12-18 VU#228186 Hot Standby Router Protocol (HSRP) uses weak authentication
2001-02-06 1998-01-20 2001-10-25 VU#19124 SSH authentication agent follows symlinks via a UNIX domain socket

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis