search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2004-08-23 2004-08-09 2004-08-23 VU#770816 CVSTrac fails to properly sanitize input passed to "filediff"
2004-08-11 2004-08-09 2004-08-11 VU#139504 Sun Solaris X Display Manager does not properly handle invalid XDMCP requests
2004-08-04 2004-08-04 2005-06-14 VU#817368 libpng png_handle_sBIT() performs insufficient bounds checking
2004-08-04 2004-08-04 2005-06-01 VU#286464 libpng contains integer overflows in progressive display image reading
2004-08-04 2004-08-04 2004-08-04 VU#160448 libpng integer overflow in image height processing
2004-08-13 2004-08-04 2004-08-13 VU#417408 JetboxOne may allow unauthorized users to execute arbitrary code
2004-08-13 2004-08-04 2004-08-13 VU#586720 JetboxOne leaves account database unencrypted
2004-08-04 2004-08-04 2007-07-21 VU#236656 libpng png_handle_iCCP() NULL pointer dereference
2004-08-04 2004-08-04 2005-06-01 VU#477512 libpng png_handle_sPLT() integer overflow
2004-08-04 2004-08-04 2005-06-14 VU#388984 libpng fails to properly check length of transparency chunk (tRNS) data
2004-08-13 2004-08-03 2004-08-13 VU#749870 Juniper Networks NetScreen firewall contains a DoS vulnerability in the SSHv1 service
2004-08-03 2004-08-02 2005-04-14 VU#714584 BlackJumboDog contains buffer overflow vulnerability
2006-09-28 2004-08-02 2007-02-09 VU#423396 X.509 certificate verification may be vulnerable to resource exhaustion
2004-12-17 2004-07-30 2004-12-22 VU#262350 Mozilla status elements can be disabled via JavaScript
2004-08-02 2004-07-28 2004-08-10 VU#435358 Check Point VPN-1 products contain boundary error in the ASN.1 decoding library

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis