search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2009-08-21 2009-08-18 2009-08-21 VU#582244 0 Libpurple buffer overflow vulnerability
2009-08-18 2009-08-16 2009-08-18 VU#485961 Acer AcerCtrls.APlunch ActiveX Control fails to properly restrict access to methods
2003-01-24 2003-01-20 2009-08-17 VU#867593 Web servers enable HTTP TRACE method by default
2009-05-18 2009-05-18 2009-08-12 VU#853097 0 ntpd autokey stack buffer overflow
2009-07-22 2009-07-22 2009-08-07 VU#259425 0 Adobe Flash vulnerability affects Flash Player and other Adobe products
2009-07-14 2009-07-14 2009-08-05 VU#466161 XML signature HMAC truncation authentication bypass
2003-08-25 2003-08-20 2009-07-30 VU#865940 Microsoft Internet Explorer does not properly evaluate "application/hta" MIME type referenced by DATA attribute of OBJECT element
2004-01-13 2003-01-13 2009-07-29 VU#749342 Multiple vulnerabilities in H.323 implementations
2009-07-14 2009-07-14 2009-07-29 VU#410676 ISC DHCP dhclient stack buffer overflow
2008-11-04 2008-11-04 2009-07-23 VU#593409 Adobe Reader and Acrobat util.printf() JavaScript function stack buffer overflow
2009-07-14 2009-07-09 2009-07-17 VU#443060 0 Mozilla Firefox 3.5 TraceMonkey JavaScript engine uninitialized memory vulnerability
2008-06-10 2008-05-31 2009-07-16 VU#878044 0 SNMPv3 improper HMAC validation allows authentication bypass
2009-07-06 2009-07-04 2009-07-15 VU#180513 Microsoft Video ActiveX control stack buffer overflow
2004-03-20 2004-03-08 2009-06-12 VU#947254 Internet Security Systems Protocol Analysis Module (PAM) does not properly handle ICQ server response messages
2008-05-01 2007-12-12 2009-06-09 VU#929656 BGP implementations do not properly handle UPDATE messages

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis