CERT Vulnerability Notes Database

Published	Public	Updated	ID	CVSS	Title
2007-07-27	2007-07-24	2008-08-06	VU#252735		ISC BIND generates cryptographically weak DNS query IDs
2008-04-30	2008-04-17	2008-07-30	VU#584089		cPanel XSRF vulnerabilities
2008-07-28	2008-07-25	2008-07-28	VU#298651	0	RealNetworks RealPlayer Shockwave Flash (SWF) file vulnerability
2008-07-28	2008-07-25	2008-07-28	VU#461187		RealPlayer file deletion overflow vulnerability
2008-07-25	2008-06-25	2008-07-28	VU#329772	0	NetApp Data ONTAP contains multiple vulnerabilities
2008-03-11	2008-03-10	2008-07-26	VU#831457		RealNetworks RealPlayer ActiveX controls property heap memory corruption
2007-02-25	2007-02-23	2008-07-25	VU#551436	0	Mozilla Firefox SVG viewer vulnerable to integer overflow
2008-01-15	2008-01-15	2008-07-22	VU#347812		UPnP enabled by default in multiple devices
2006-09-20	2005-02-25	2008-07-21	VU#468798		SISCO OSI stack fails to properly validate packets
2007-05-03	2007-05-02	2008-07-21	VU#213516		LiveData Protocol Server fails to properly handle requests for WSDL files
2007-02-12	2007-02-10	2008-07-21	VU#881872	0	Sun Solaris telnet authentication bypass vulnerability
2008-05-06	2008-05-06	2008-07-21	VU#147027		PHP path translation vulnerability
2008-04-25	2008-04-08	2008-07-21	VU#159523	0	Adobe Flash Player integer overflow vulnerability
2002-08-08	2002-06-18	2008-07-21	VU#195371		SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function
2007-05-14	2007-05-14	2008-07-21	VU#268336		Samba command injection vulnerability

Software Engineering Institute