search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2002-09-26 2001-05-07 2003-02-24 VU#471691 A1Stats multiple CGI scripts fail to adequately validate user input
2002-03-29 2001-05-07 2002-03-29 VU#132099 Jana Server does not adequately validate user input thereby allowing directory traversal
2001-06-22 2001-05-08 2002-12-16 VU#795707 ScreamingMedia SITEware does not adequately validate user input thereby allowing arbitrary file disclosure via directory traversal
2001-05-17 2001-05-09 2001-06-26 VU#145904 Microsoft Windows 2000 Kerberos service vulnerable to DoS via repeated invalid requests
2001-05-09 2001-05-09 2001-05-09 VU#258632 SGI IRIX Embedded Support Partner (ESP) service rpc.espd contains buffer overflow
2002-09-27 2001-05-10 2002-09-27 VU#910624 Microsoft Windows 2000 Indexing Service permits read access to files outside web root via crafted request
2001-05-22 2001-05-10 2001-06-26 VU#655248 Microsoft Index Server contains buffer overflow
2001-05-10 2001-05-10 2003-04-09 VU#106392 Cisco IOS vulnerable to DoS via unrecognized transitive attribute in BGP UPDATE
2002-09-16 2001-05-11 2002-09-16 VU#199408 Microsoft Internet Explorer vulnerable to DoS via crafted ftp:// URL
2001-05-15 2001-05-14 2001-09-18 VU#789543 IIS decodes filenames superfluously after applying security checks
2001-09-18 2001-05-14 2001-09-18 VU#137544 Microsoft IIS FTP service searches all trusted domains for user accounts
2001-05-17 2001-05-17 2001-06-26 VU#399087 Internet Explorer incorrectly validates certificates when CRL checking is enabled
2001-06-07 2001-05-17 2001-06-07 VU#988768 Microsoft Internet Explorer (IE) permits modification of URL displayed in address bar
2002-09-27 2001-05-21 2002-09-27 VU#345576 Microsoft Word does not check for macros contained in linked template file when opening RTF document
2002-09-27 2001-05-23 2002-09-27 VU#739376 Microsoft Windows Media Player creates URL shortcut that may contain HTML code in known location in Local Computer Zone

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis