search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2006-06-06 2006-05-18 2006-06-07 VU#466428 Skype URI handler fails to properly parse parameters
2003-03-26 2003-02-24 2003-05-23 VU#714121 Incorrect NXDOMAIN responses from AAAA queries could cause denial-of-service conditions
2007-03-22 2007-03-13 2007-03-22 VU#714593 McAfee ePolicy Orchestrator and ProtectionPilot ActiveX control buffer overflow vulnerability
2007-02-22 2007-02-22 2009-04-13 VU#847993 Macrovision FLEXnet Connect / InstallShield Update Service Agent ActiveX buffer overflows
2002-12-11 2002-12-05 2002-12-16 VU#810921 Cobalt RaQ Server Appliances contains vulnerability allowing remote root compromise
2003-01-24 1997-10-27 2003-02-05 VU#258721 Various FTP clients fail to account for pipe (|) characters in default file names
2005-07-12 2005-07-12 2005-07-13 VU#218621 Microsoft Word buffer overflow in font processing routine
2007-03-20 2007-01-12 2007-03-26 VU#296593 NETxAutomation NETxEIB OPC Server fails to properly validate OPC server handles
2005-04-12 2005-04-12 2005-08-02 VU#275193 Microsoft Exchange Server contains unchecked buffer in SMTP extended verb handling
2010-03-01 2010-02-26 2010-04-28 VU#612021 Internet Explorer VBScript Windows Help arbitrary code execution
2004-04-07 2004-04-07 2004-04-23 VU#659228 Cisco WLSE and HSE devices contain hardcoded username and password
2000-09-26 2000-07-27 2000-11-29 VU#32650 Denial of Service Attack in NetBIOS Services
2003-05-23 2003-02-22 2008-06-06 VU#142121 zlib "gzprintf()" function vulnerable to buffer overflow
2002-09-26 2002-09-25 2003-05-30 VU#406121 Apache mod_dav module vulnerable to DoS
2007-07-11 2007-07-10 2007-07-11 VU#101321 Microsoft Windows Vista Teredo IPv6 interface firewall bypass vulnerability

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis