search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2004-09-16 2004-08-26 2004-09-17 VU#339089 star fails to set proper permissions on programs specified in RSH environment variable
2004-10-22 2004-08-25 2004-10-25 VU#981134 Linux kernel USB drivers do not initialize kernel memory properly
2004-12-01 2004-08-25 2005-05-17 VU#555304 LibTIFF vulnerable to denial-of-service condition
2004-10-01 2004-08-25 2005-10-05 VU#238678 The zlib compression library is vulnerable to a denial-of-service condition
2004-08-25 2004-08-23 2005-05-16 VU#928598 Sun Solaris dtmail contains a format string vulnerability
2004-09-14 2004-08-18 2004-10-28 VU#526089 Microsoft Internet Explorer treats arbitrary files as images for drag and drop operations
2004-08-19 2004-08-18 2004-08-19 VU#989406 Cisco IOS fails to properly handle malformed OSPF packets
2004-08-17 2004-08-16 2004-08-19 VU#579225 CVS "history" command may disclose sensitive information
2004-08-23 2004-08-15 2004-08-25 VU#674542 Powie's PSCRIPT Forum fails to filter user posts
2004-09-07 2004-08-11 2004-10-06 VU#330638 KDE DCOPServer insecurely creates temporary files
2004-08-11 2004-08-10 2004-08-11 VU#948750 Microsoft Outlook Web Access contains vulnerability in HTML redirection query
2004-10-20 2004-08-10 2004-10-20 VU#760256 The ActiveX and HTML file browsers of the Symantec 4400 Series Clientless VPN Gateway contains various unspecified vulnerabilities
2004-08-16 2004-08-10 2004-08-16 VU#128414 Apple Safari fails to properly handle form data in HTTP redirects
2004-09-01 2004-08-10 2004-09-01 VU#316206 Oracle Database Server contains several vulnerabilities
2004-08-10 2004-08-09 2004-08-31 VU#735966 AOL Instant Messenger vulnerable to buffer overflow

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis