search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2002-03-29 1999-08-21 2002-03-29 VU#12746 Microsoft scriptlet.typlib ActiveX object unsafe for scripting from Internet Explorer
2002-03-29 2002-03-29 2002-03-29 VU#585123 Microsoft Internet Explorer does not adequately evaluate malformed URLs
2001-11-28 2001-04-30 2002-03-28 VU#886083 WU-FTPD does not properly handle file name globbing
2002-02-28 2002-02-06 2002-03-15 VU#750299 Oracle9i Application Server Apache PL/SQL module vulnerable to buffer overflow via HTTP request
2002-02-25 2002-02-06 2002-03-15 VU#805915 Oracle9i Application Server Apache PL/SQL module does not properly handle HTTP Authorization header
2002-02-28 2002-02-06 2002-03-15 VU#878603 Oracle9i Application Server Apache PL/SQL module vulnerable to buffer overflow via HTTP Authorization header
2002-03-12 2002-01-10 2002-03-15 VU#313280 Oracle9i Application Server Apache PL/SQL module vulnerable to buffer overflow via HTTP Location header
2002-02-28 2002-02-06 2002-03-15 VU#659043 Oracle9i Application Server Apache PL/SQL module vulnerable to buffer overflow via Database Access Descriptor password
2002-01-03 2001-12-13 2002-03-15 VU#500203 Oracle9i Application Server Apache PL/SQL module vulnerable to buffer overflow via help page request
2002-01-09 2001-12-13 2002-03-15 VU#758483 Oracle9i Application Server Apache PL/SQL module does not properly decode URL
2002-02-28 2002-02-06 2002-03-15 VU#923395 Oracle9i Application Server Apache PL/SQL module vulnerable to buffer overflow via cache directory name
2002-03-01 2002-01-10 2002-03-15 VU#193523 Oracle9i Application Server allows unauthenticated access to PL/SQL applications via alternate Database Access Descriptor
2002-02-27 2002-02-06 2002-03-12 VU#547459 Oracle 9iAS creates temporary files when processing JSP requests that are world-readable
2002-03-12 2002-01-10 2002-03-12 VU#736923 Oracle 9iAS SOAP components allow anonymous users to deploy applications by default
2002-02-27 2002-01-10 2002-03-12 VU#717827 Multiple Oracle 9iAS sample pages contain vulnerabilities

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis