search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2004-05-06 2004-01-26 2004-05-06 VU#871838 Gaim contains a buffer overflow vulnerability in the gaim_url_parse() function
2004-05-06 2004-01-26 2004-05-06 VU#444158 Gaim contains a buffer overflow vulnerability in the http_canread() function
2004-05-06 2004-01-26 2004-05-06 VU#503030 Gaim fails to properly parse cookies in Yahoo web connections
2004-05-06 2004-01-26 2004-05-06 VU#371382 Gaim fails to properly validate the "name" parameter in the Yahoo login webpage
2004-05-06 2004-01-26 2004-05-06 VU#297198 Gaim fails to properly validate the "value" parameter in the Yahoo login webpage
2004-05-06 2004-01-26 2004-05-06 VU#527142 Gaim contains a buffer overflow vulnerability in the yahoo_packet_read() function
2004-05-03 2004-02-18 2004-05-04 VU#782958 Apple QuickTime contains an integer overflow in the "QuickTime.qts" extension
2004-04-30 2000-11-01 2006-02-03 VU#540517 libgcc contains multiple flaws that allow integer type range vulnerabilities to occur at runtime
2004-04-30 2004-01-26 2004-05-06 VU#226974 Gaim contains an off-by-one buffer overflow vulnerability in the gaim_quotedp_decode() function
2004-04-30 2004-01-26 2004-05-06 VU#404470 Gaim contains an off-by-one buffer overflow vulnerability in the yahoo_decode() function
2004-04-30 2004-01-26 2004-05-06 VU#655974 Gaim contains a buffer overflow vulnerability in the yahoo_decode() function
2004-04-30 2004-01-26 2004-05-06 VU#190366 Gaim contains a buffer overflow vulnerability in the gaim_quotedp_decode() function
2004-04-26 2004-04-21 2004-04-26 VU#184558 BEA WebLogic Server contains a vulnerability in the URL pattern matching
2004-04-23 2004-04-21 2004-04-23 VU#574222 BEA WebLogic Server configuration wizard stores administrative credentials in clear text log files
2004-04-23 2004-04-21 2004-04-23 VU#658878 BEA WebLogic Server allows unauthorized removal of EJB objects

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis