search menu icon-carat-right cmu-wordmark

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2005-04-12 2005-04-12 2005-08-02 VU#275193 Microsoft Exchange Server contains unchecked buffer in SMTP extended verb handling
2005-03-22 2002-02-02 2005-08-01 VU#273262 Multiple web browsers vulnerable to spoofing via Internationalized Domain Name support
2005-03-09 2004-11-08 2005-08-01 VU#448384 ISC DHCP contains a format string vulnerabilty in errwarn.c
2005-04-19 2005-04-15 2005-08-01 VU#973309 Mozilla may execute JavaScript with elevated privileges when defined in site icon tag
2005-05-10 2005-05-07 2005-08-01 VU#648758 Mozilla Firefox executes JavaScript in the "IconURL" parameter of "InstallTrigger.install()" with chrome privileges
2005-06-14 2005-06-14 2005-07-28 VU#800829 Telnet Client Information Disclosure Vulnerability
2005-04-01 2005-03-28 2005-07-28 VU#341908 Multiple Telnet Clients vulnerable to buffer overflow via the env_opt_add() function in telnet.c
2005-07-13 2005-07-13 2005-07-26 VU#138538 WebEOC is vulnerable to cross-site scripting attacks
2005-07-12 2005-07-12 2005-07-22 VU#720742 Microsoft Color Management Module buffer overflow during profile tag validation
2005-06-24 2005-06-22 2005-07-22 VU#352625 VERITAS Backup Exec Server Service contains a buffer overflow vulnerability
2005-06-24 2005-06-22 2005-07-22 VU#492105 VERITAS Backup Exec Remote Agent fails to properly validate authentication requests
2005-07-13 2005-07-13 2005-07-20 VU#258834 WebEOC privileges are based on client-side authorization
2005-07-13 2005-07-13 2005-07-20 VU#956762 WebEOC is vulnerable to a denial-of-service condition via uploading large files
2005-07-13 2005-07-13 2005-07-20 VU#372797 WebEOC contains multiple SQL injection vulnerabilities
2004-12-22 2004-10-20 2005-07-19 VU#939688 Microsoft Internet Explorer HTML Help control bypasses Local Machine Zone Lockdown

Sponsored by CISA.