search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2006-09-28 2006-09-28 2011-07-22 VU#386964 OpenSSL SSLv2 client code fails to properly check for NULL
2002-06-28 2002-06-25 2004-12-20 VU#814627 Sendmail vulnerable to buffer overflow when DNS map is specified using TXT records
2003-08-21 2000-07-11 2003-08-21 VU#26825 Cisco Secure PIX Firewall TCP Reset Vulnerability
2002-07-29 2002-07-29 2003-05-30 VU#405955 util-linux package vulnerable to privilege escalation when "ptmptmp" file is not removed properly when using "chfn" utility
2002-09-26 2001-12-31 2002-09-26 VU#764027 zml.cgi does not adequately validate user input thereby allowing directory traversal
2008-08-18 2008-07-28 2008-08-27 VU#778427 Intrinsic Swimage Encore does not securely manage login credentials
2002-06-04 2002-05-27 2002-11-15 VU#291555 Oracle Web Cache contains buffer overflow vulnerabilities
2007-03-06 2007-03-06 2007-03-19 VU#313225 Apple QuickTime QTIF heap buffer overflow
2005-01-05 2004-12-17 2005-01-05 VU#697598 Symantec Brightmail Anti-Spam Spamhunter UTF encoding error
2002-02-27 2002-01-10 2002-03-12 VU#717827 Multiple Oracle 9iAS sample pages contain vulnerabilities
2004-03-08 2004-01-26 2004-03-19 VU#197318 IBM Net.Data db2www CGI interpreter fails to properly validate requested macro filenames
2005-08-02 2005-07-13 2005-08-15 VU#996798 Mozilla Firefox insecurely handles content from external applications
2011-07-29 2011-05-16 2011-07-29 VU#690315 Avaya Secure Access Link (SAL) Gateway information disclosure vulnerability
2008-06-27 2008-05-12 2008-07-15 VU#516627 Microsoft Internet Explorer fails to properly restrict access to frames
2006-03-14 2006-03-14 2006-03-14 VU#123222 Microsoft Excel malformed graphic memory corruption vulnerability

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis