search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2008-01-31 2008-01-10 2008-01-31 VU#326065 Liferay Portal Enterprise Admin User-Agent HTTP header XSS
2007-02-19 2007-02-19 2008-01-30 VU#196240 Sourcefire Snort DCE/RPC preprocessor does not properly reassemble fragmented packets
2008-01-30 2008-01-30 2008-01-30 VU#639169 SwiftView ActiveX control and plug-in stack buffer overflow
2008-01-10 2008-01-08 2008-01-29 VU#115083 Microsoft Windows IGMPv3 and MLDv2 processing vulnerability
2008-01-25 2008-01-24 2008-01-25 VU#308556 GE Fanuc CIMPLICITY HMI heap buffer overflow
2007-01-24 2007-01-24 2008-01-25 VU#274760 Cisco IOS fails to properly process specially crafted IPv6 packets
2008-01-03 2007-12-28 2008-01-23 VU#553235 Jetty fails to properly process URLs that contain double / characters
2008-01-22 2008-01-17 2008-01-23 VU#412228 Citrix Presentation Server heap based buffer overflow
2007-12-10 2007-11-27 2008-01-18 VU#232881 Squid remote denial-of-service vulnerability
2007-12-19 2007-12-19 2008-01-15 VU#758769 Adobe Flash Player asfunction protocol may enable cross-site scripting
2008-01-08 2008-01-08 2008-01-14 VU#921339 SSH Tectia Client and Server ssh-signer local privilege escalation
2007-11-24 2007-11-23 2008-01-11 VU#659761 Apple QuickTime RTSP Content-Type header stack buffer overflow
2007-12-14 2007-12-14 2008-01-10 VU#205073 Gesytec Easylon OPC Server fails to properly validate OPC server handles
2008-01-08 2008-01-08 2008-01-08 VU#410025 Microsoft Windows LSASS privilege escalation vulnerability
2007-12-18 2007-12-18 2008-01-07 VU#905292 Apple Safari code execution vulnerability

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis