search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2004-09-17 2004-09-14 2004-09-17 VU#653160 Mozilla Linux installer does not properly set file permissions
2004-09-17 2004-09-14 2004-09-17 VU#414240 Mozilla Mail vulnerable to buffer overflow via "writeGroup()" function in "nsVCardObj.cpp"
2004-09-17 2004-05-29 2004-09-17 VU#125776 Multiple buffer overflows in Mozilla POP3 protocol handler
2004-09-17 2004-09-04 2004-09-17 VU#327560 Mozilla "send page" feature contains a buffer overflow vulnerability
2004-09-17 2004-09-14 2004-09-17 VU#808216 0 Mozilla contains heap overflow in UTF8 conversion of hostname portion of URLs
2004-09-17 2004-09-14 2004-09-17 VU#847200 Mozilla contains integer overflows in bitmap image decoder
2004-09-17 2004-09-14 2004-09-17 VU#651928 Mozilla may allow violation of cross-domain scripting policies via dragging
2004-09-16 2004-08-26 2004-09-17 VU#339089 star fails to set proper permissions on programs specified in RSH environment variable
2004-09-16 2004-08-30 2004-09-17 VU#700326 cdrecord fails to set proper permissions on programs specified in RSH environment variable
2004-09-17 2004-09-15 2004-09-17 VU#481998 Apache vulnerable to buffer overflow when expanding environment variables
2004-09-17 2004-08-31 2004-09-17 VU#460528 Mozilla fails to properly handle script-generated events
2004-09-09 2004-09-08 2004-09-29 VU#545446 Apple Mac OS X CoreFoundation contains a buffer overflow vulnerability
2004-09-07 2004-08-11 2004-10-06 VU#330638 KDE DCOPServer insecurely creates temporary files
2004-09-07 2004-07-06 2004-10-08 VU#518782 Ethereal fails to properly handle malformed SMB packets
2004-10-12 2004-09-23 2004-10-12 VU#668206 Macromedia JRun Server is vulnerable to a cross-site scripting attack

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis