search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2006-06-14 2006-06-11 2006-08-24 VU#817108 Yahoo! Mail script injection vulnerability
2005-02-08 2005-02-08 2005-02-09 VU#823971 Microsoft Internet Explorer contains a Channel Definition Format (CDF) cross-domain vulnerability
2004-12-17 2004-11-17 2004-12-17 VU#743974 Microsoft Internet Explorer execCommand() method SaveAs command uses misleading "Save HTML Document" dialog
2004-02-27 2004-02-06 2004-02-27 VU#240174 Oracle9i Database contains buffer overflow in TIME_ZONE session parameter
2001-09-14 2001-05-24 2003-04-09 VU#574739 Beck GmbH IPC@Chip does not adequately validate user input thereby disclosing sensitive network data via crafted URL
2002-03-28 2002-02-19 2002-07-29 VU#619707 Microsoft SQL Server contains buffer overflows in openrowset and opendatasource macros
2002-07-31 2001-02-13 2002-07-31 VU#161576 Certain implementations of SSH1 may reveal internal cryptologic state
2005-04-27 2005-04-12 2005-04-28 VU#948486 Oracle products contain multiple vulnerabilities
2011-10-10 2011-10-10 2011-10-10 VU#924307 D-Link DIR-685 Xtreme N storage router WPA/WPA2 encryption failure
2005-01-26 2005-01-26 2005-01-26 VU#689326 Cisco IOS vulnerable to DoS via malformed BGP packet
2007-01-18 2006-12-19 2007-04-05 VU#447772 Mozilla JavaScript Engine multiple memory corruption vulnerabilities
2002-08-05 2002-07-16 2002-10-02 VU#212707 Multiple vendor implementations of file scanning utilities vulnerable to DoS via compressed file archive
2004-03-24 2004-03-22 2004-04-05 VU#792286 Ethereal fails to properly handle a zero-length Presentation protocol selector
2001-10-03 2001-10-02 2004-03-24 VU#595507 Common Desktop Environment (CDE) ToolTalk RPC Server rpc.ttdbserverd contains format string vulnerability
2006-09-20 2006-09-12 2006-11-14 VU#168372 Adobe Flash Player allowScriptAccess protection bypass vulnerability

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis