search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2006-01-25 2006-01-17 2006-01-25 VU#870172 Oracle Database Net Listener vulnerability
2006-02-07 2006-02-02 2006-02-09 VU#759273 Mozilla QueryInterface memory corruption vulnerability
2003-01-13 2002-04-23 2003-01-13 VU#772563 Lotus Domino web server vulnerable to buffer overflow via long HTTP authentication header containing non-ASCII characters
2004-04-22 2004-04-14 2004-04-30 VU#352110 BEA WebLogic Server internal methods may disclose sensitive information
2006-08-08 2006-08-08 2006-08-16 VU#340060 Microsoft Internet Explorer HTML layout rendering vulnerability
2001-05-06 2001-01-18 2001-06-21 VU#178560 Dallas Semiconductor iButton DS1991 vulnerable to dictionary attack
2010-12-17 2010-12-16 2010-12-21 VU#603928 Ecava IntegraXor stack-based buffer overflow vulnerability
2002-06-26 2002-06-24 2002-12-06 VU#369347 OpenSSH vulnerabilities in challenge response handling
2007-01-09 2006-12-20 2007-05-16 VU#102289 Sun Java JRE vulnerable to privilege escalation
2003-12-29 2003-11-27 2003-12-29 VU#940388 GnuPG creates ElGamal keys for signing using insufficient entropy
2005-06-14 2005-06-14 2005-06-15 VU#300373 Microsoft Outlook Web Access vulnerable to cross-site scripting
2003-04-10 2003-04-07 2003-07-10 VU#267873 Samba contains multiple buffer overflows
2007-05-03 2007-05-01 2007-07-03 VU#718460 ISC BIND denial of service vulnerability
2008-03-06 2008-03-06 2008-03-07 VU#223028 Sun Java WebStart stack buffer overflow
2006-11-29 2006-11-28 2007-01-15 VU#848960 Apple Mac OS X WebKit deallocated object access vulnerability

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis