CERT Vulnerability Notes Database

Published	Public	Updated	ID	CVSS	Title
2008-01-22	2008-01-17	2008-04-29	VU#248184		Skype does not properly filter input from external websites
2008-02-28	2008-02-28	2008-04-29	VU#568073		Canon digital multifunction copiers FTP bounce vulnerability
2008-02-14	2008-02-13	2008-04-29	VU#771937		Apache mod_jk2 host header buffer overflow
2008-04-21	2008-04-14	2008-04-29	VU#858595		ClamAV upack heap buffer overflow vulnerability
2008-03-18	2008-03-18	2008-04-28	VU#329673		BusinessObjects RptViewerAX ActiveX control stack buffer overflow
2007-01-24	2007-01-24	2008-04-28	VU#292713		Online Media Technologies NCTsoft NCTAudioFile2 ActiveX buffer overflow
2008-01-25	2007-12-10	2008-04-28	VU#203611		inet_network() off-by-one buffer overflow
2005-04-12	2005-04-12	2008-04-22	VU#222750		TCP/IP implementations do not adequately validate ICMP error messages
2008-04-21	2007-12-11	2008-04-21	VU#570089		Microsoft HeartbeatCtl ActiveX control buffer overflow
2008-04-18	2008-04-16	2008-04-18	VU#705529		Apple Safari WebKit fails to properly handle a crafted URL
2008-04-18	2008-04-16	2008-04-18	VU#529441		Apple Safari fails to properly handle a file name
2008-04-18	2008-04-16	2008-04-18	VU#441529		Mozilla Firefox JavaScript engine fails to properly handle garbage collection
2008-04-14	2008-03-06	2008-04-14	VU#404515		Ruby WEBrick vulnerable to directory traversal
2008-04-11	2008-04-08	2008-04-11	VU#632963		Microsoft GDI buffer overflow vulnerability
2008-03-06	2008-03-06	2008-04-10	VU#248372	0	AirSpan WiMAX ProST web management interface authentication bypass vulnerability

Software Engineering Institute