search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2004-08-04 2004-08-04 2005-06-01 VU#477512 libpng png_handle_sPLT() integer overflow
2004-08-04 2004-08-04 2005-06-01 VU#286464 libpng contains integer overflows in progressive display image reading
2005-05-19 2005-05-19 2005-06-03 VU#514386 Groove Mobile Workspace vulnerable to script injection via SharePoint replicated menus
2005-06-07 2005-04-01 2005-06-07 VU#250037 Adobe Acrobat and Acrobat Reader vulnerable to information disclosure via "LoadFile()" method in ActiveX control
2005-06-07 2005-04-15 2005-06-07 VU#366372 RSA Authentication Agent for Web fails to properly validate input
2005-06-07 2005-06-07 2005-06-08 VU#758582 Yamaha MusicCAST MCX-1000 wireless network interface operates in Access Point mode by default
2005-06-08 2005-04-06 2005-06-08 VU#344900 Cisco IOS Easy VPN Server may allow unauthorized users to complete XAUTH authentication
2005-06-08 2005-02-24 2005-06-08 VU#360296 Cisco ACNS may be vulnerable to DoS via malformed IP packets
2005-06-08 2005-04-06 2005-06-08 VU#236748 Cisco IOS Easy VPN Server fails to properly process ISAKMP profile attributes
2005-05-19 2005-05-19 2005-06-14 VU#155610 Groove Virtual Office COM objects may be accessed insecurely
2004-08-04 2004-08-04 2005-06-14 VU#817368 libpng png_handle_sBIT() performs insufficient bounds checking
2004-08-04 2004-08-04 2005-06-14 VU#388984 libpng fails to properly check length of transparency chunk (tRNS) data
2005-06-14 2005-06-14 2005-06-14 VU#489397 Microsoft Server Message Block vulnerable to buffer overflow
2005-02-08 2005-02-08 2005-06-14 VU#580299 Microsoft Internet Explorer contains URL decoding cross-domain vulnerability
2005-06-14 2005-06-14 2005-06-15 VU#300373 Microsoft Outlook Web Access vulnerable to cross-site scripting

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis