CERT Vulnerability Notes Database

Published	Public	Updated	ID	Title
2008-04-14	2008-03-06	2008-04-14	VU#404515	Ruby WEBrick vulnerable to directory traversal
2008-04-18	2008-04-16	2008-04-18	VU#441529	Mozilla Firefox JavaScript engine fails to properly handle garbage collection
2008-04-18	2008-04-16	2008-04-18	VU#529441	Apple Safari fails to properly handle a file name
2008-04-18	2008-04-16	2008-04-18	VU#705529	Apple Safari WebKit fails to properly handle a crafted URL
2008-04-21	2007-12-11	2008-04-21	VU#570089	Microsoft HeartbeatCtl ActiveX control buffer overflow
2005-04-12	2005-04-12	2008-04-22	VU#222750	TCP/IP implementations do not adequately validate ICMP error messages
2008-01-25	2007-12-10	2008-04-28	VU#203611	inet_network() off-by-one buffer overflow
2007-01-24	2007-01-24	2008-04-28	VU#292713	Online Media Technologies NCTsoft NCTAudioFile2 ActiveX buffer overflow
2008-03-18	2008-03-18	2008-04-28	VU#329673	BusinessObjects RptViewerAX ActiveX control stack buffer overflow
2008-04-21	2008-04-14	2008-04-29	VU#858595	ClamAV upack heap buffer overflow vulnerability
2008-02-14	2008-02-13	2008-04-29	VU#771937	Apache mod_jk2 host header buffer overflow
2008-02-28	2008-02-28	2008-04-29	VU#568073	Canon digital multifunction copiers FTP bounce vulnerability
2008-01-22	2008-01-17	2008-04-29	VU#248184	Skype does not properly filter input from external websites
2008-04-08	2008-04-08	2008-04-29	VU#155563	Microsoft Office Project vulnerable to remote code execution via specially crafted Project file
2008-04-25	2008-04-15	2008-04-30	VU#218395	CUPS integer overflow vulnerability

Software Engineering Institute