search menu icon-carat-right cmu-wordmark

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2009-05-06 2008-12-04 2009-05-08 VU#576996 0 NuPoint Messenger server transmits authentication credentials in plain text
2006-05-19 2006-05-19 2006-06-14 VU#446012 0 Microsoft Word object pointer memory corruption vulnerability
2005-04-12 2005-04-12 2005-09-15 VU#673051 0 Microsoft Windows opens OLE2 documents using a program specified internally by the document
2007-09-05 2007-09-05 2007-10-01 VU#563673 0 Cisco Adaptive Security Appliance insecurely logs passwords
2008-04-25 2008-04-08 2008-07-21 VU#159523 0 Adobe Flash Player integer overflow vulnerability
2008-05-30 2008-05-28 2008-05-30 VU#661475 0 OpenSSL Server Name extension Denial of Service
2009-03-13 2009-03-13 2009-03-13 VU#845747 0 PTK contains multiple vulnerabilities
2009-02-11 2009-02-11 2009-02-24 VU#310355 0 GE Fanuc Proficy HMI/SCADA iFIX uses insecure authentication techniques
2007-05-02 2007-05-02 2007-05-03 VU#530057 0 Cisco ASA fails to properly process DHCP relay packets
2002-04-10 2002-04-10 2002-04-10 VU#520707 0 Microsoft Internet Information Server (IIS) contains cross-site scripting vulnerability in redirect response messages
2004-09-17 2004-09-14 2004-09-17 VU#808216 0 Mozilla contains heap overflow in UTF8 conversion of hostname portion of URLs
2017-11-17 2017-11-16 2017-11-20 VU#817544 0 Windows 8 and later fail to properly randomize every application if system-wide mandatory ASLR is enabled via EMET or Windows Defender Exploit Guard
2007-10-26 2007-10-26 2007-11-14 VU#342793 0 RSA Keon cross-site scripting vulnerabilities
2004-10-21 2004-10-12 2004-10-22 VU#203126 0 Microsoft IIS contains vulnerability in NNTP service
2018-09-05 2018-09-05 2018-10-23 VU#598349 0 Automatic DNS registration and proxy autodiscovery allow spoofing of network services

Sponsored by CISA.