search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2002-07-13 2001-08-15 2002-07-13 VU#630531 Microsoft Internet Information Server (IIS) vulnerable to buffer overflow via malformed server-side include directive
2001-09-18 2001-08-15 2001-09-18 VU#959211 Microsoft IIS vulnerable to DoS via invalid request for very long WebDAV requests
2002-01-31 2001-08-14 2002-01-31 VU#726891 Novell Groupwise contains protocol implementation vulnerability allowing email to be viewed by unauthorized user
2002-09-27 2001-08-13 2002-09-27 VU#494307 SIX-webboard does not adequately validate user input thereby permitting directory traversal
2001-08-14 2001-08-13 2001-08-14 VU#544555 Microsoft Internet Information Server 4.0 (IIS) vulnerable to DoS when URL redirecting is enabled
2003-10-30 2001-08-07 2003-10-30 VU#822019 Avaya Argent Office requests 'HoldMusic' file from broadcast address via TFTP
2003-10-30 2001-08-07 2003-10-30 VU#293051 Avaya Argent Office uses weak SNMP authentication mechanism
2003-10-30 2001-08-07 2003-10-30 VU#742115 Avaya Argent Office uses weak authentication for TFTP-based administrative control
2003-10-30 2001-08-07 2003-10-30 VU#981915 Avaya Argent Office vulnerable to denial of service via malformed DNS packets
2001-09-17 2001-08-03 2001-09-17 VU#314347 phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query
2001-09-10 2001-08-03 2001-09-13 VU#920931 phpBB does not adequately validate user input for language selection thereby allowing user to execute arbitrary php code
2001-08-13 2001-08-02 2002-12-12 VU#657547 Critical Path directory products contain multiple vulnerabilities in LDAP handling code
2003-10-27 2001-07-26 2003-10-28 VU#399883 Linux groff utility pic contains format string vulnerability
2001-10-18 2001-07-25 2001-10-22 VU#847803 Php variables passed from the browser are stored in global context
2001-07-24 2001-07-24 2001-08-07 VU#994851 Microsoft Services for UNIX Telnet server is vulnerable to denial of service via memory leak

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis