CERT Vulnerability Notes Database

Published	Public	Updated	ID	CVSS	Title
2008-07-28	2008-07-25	2008-07-28	VU#461187		RealPlayer file deletion overflow vulnerability
2008-07-28	2008-07-25	2008-07-28	VU#298651	0	RealNetworks RealPlayer Shockwave Flash (SWF) file vulnerability
2008-04-30	2008-04-17	2008-07-30	VU#584089		cPanel XSRF vulnerabilities
2007-07-27	2007-07-24	2008-08-06	VU#252735		ISC BIND generates cryptographically weak DNS query IDs
2008-07-29	2008-07-21	2008-08-06	VU#716387		Oracle Weblogic Apache connector vulnerable to buffer overflow
2008-08-08	2008-08-06	2008-08-08	VU#663763		Apache mod_proxy_ftp XSS vulnerability
2008-07-07	2008-07-07	2008-08-12	VU#837785		Microsoft Office Snapshot Viewer ActiveX control race condition
2003-09-16	2003-09-16	2008-08-12	VU#333628		OpenSSH contains buffer management errors
2008-08-12	2008-08-12	2008-08-13	VU#309739	0	Microsoft Color Management System (MSCMS) module remote code execution
2008-02-04	2007-11-22	2008-08-13	VU#776931		Aurigma ImageUploader ActiveX control stack buffer overflows
2008-08-15	2008-08-07	2008-08-15	VU#661827		Cisco WebEx Meeting Manager WebexUCFObject ActiveX Control stack buffer overflow
2008-08-18	2008-08-18	2008-08-19	VU#938323		Postfix local privilege escalation
2008-08-19	2008-08-11	2008-08-19	VU#343355		Apache Tomcat UTF8 Directory Traversal Vulnerability
2008-08-25	2007-08-25	2008-08-25	VU#914785		SoftArtisans XFile FileManager ActiveX control stack buffer overflows
2008-08-18	2008-07-28	2008-08-27	VU#778427		Intrinsic Swimage Encore does not securely manage login credentials

Software Engineering Institute