VULNERABILITY NOTES

• CERT-In Vulnerability Note CIVN-2008-141
  (September 03, 2008)
  Vulnerability in the Solaris sendfilev() system call
  
  
• CERT-In Vulnerability Note CIVN-2008-140
  (August 29, 2008)
  Web Management Authentication Bypass vulnerability in Trend Micro Products
  
  
• CERT-In Vulnerability Note CIVN-2008-139
  (August 29, 2008)
  Linux Kernel "sctp_setsockopt_auth_key()" Denial of Service Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-138
  (August 26, 2008)
  Vulnerability in the Solaris NFSv4 Client Kernel Module
  
  
• CERT-In Vulnerability Note CIVN-2008-137
  (August 26, 2008)
  Microsoft Visual Studio "Msmask32" ActiveX Code Execution Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-136
  (August 25, 2008)
  Linux Kernel "rt6_fill_node()" Denial of Service Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-135
  (August 25, 2008)
  Apache Tomcat "UTF-8" Remote Directory Traversal Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-134
  (August 20, 2008)
  Linux Kernel "dccp_setsockopt_change()" Integer Overflow Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-133
  (August 20, 2008)
  Webex Meeting Manager ActiveX Control Buffer Overflow Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-132
  (August 19, 2008)
  Linux Kernel UBIFS Orphan Inode Local Denial of Service Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-131
  (August 14, 2008)
  Multiple Vulnerabilities in Microsoft PowerPoint
  
  
• CERT-In Vulnerability Note CIVN-2008-130
  (August 14, 2008)
  Microsoft Windows Messenger ActiveX Control Information Disclosure Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-129
  (August 14, 2008)
  Microsoft Windows Event System Array Index Verification & ‘User Subscription Request’ Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-128
  (August 14, 2008)
  Microsoft Outlook Express and Windows Mail MHTML Handler Cross-Domain Information Disclosure Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-127
  (August 14, 2008)
  IPsec Policy Processing Information Disclosure Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-126
  (August 14, 2008)
  Microsoft Windows Image Color Management System Remote Code Execution Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-125
  (August 14, 2008)
  Multiple Remote Code Execution Vulnerabilities in Microsoft Internet Explorer
  
  
• CERT-In Vulnerability Note CIVN-2008-124
  (August 14, 2008)
  Multiple Vulnerabilities in Microsoft Office Filters
  
  
• CERT-In Vulnerability Note CIVN-2008-123
  (August 14, 2008)
  Multiple Vulnerabilities in Microsoft Excel
  
  
• CERT-In Vulnerability Note CIVN-2008-122
  (August 13, 2008)
  Vulnerability in the Solaris snoop utility
  
  
• CERT-In Vulnerability Note CIVN-2008-121
  (August 13, 2008)
  Linux Kernel "snd_seq_oss_synth_make_info()" Information Disclosure Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-120
  (August 13, 2008)
  Linux kernel uvc_parse_format function buffer overflow vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-119
  (August 07, 2008)
  Apache mod_proxy_ftp module Cross-Site Scripting Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-118
  (August 07, 2008)
  Vulnerability in Solaris namefs kernel module
  
  
• CERT-In Vulnerability Note CIVN-2008-117
  (August 06, 2008)
  Apache Tomcat 'RequestDispatcher' Information Disclosure Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-116
  (August 05, 2008)
  AVG Anti-Virus UPX Processing Denial of Service Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-115
  (August 05, 2008)
  Trend Micro OfficeScan Web-Deployment ObjRemoveCtrl Class Buffer Overflow Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-114
  (July 31, 2008)
  Oracle Weblogic Apache Connector Buffer Overflow Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-113
  (July 29, 2008)
  Linux Kernel LDT Denial of Service Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-112
  (July 29, 2008)
  Oracle Database DBMS_AQELM Package Buffer Overflow Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-111
  (July 29, 2008)
  Oracle Internet Directory Pre-Authentication LDAP Denial of Service Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-110
  (July 29, 2008)
  Oracle Database Local Untrusted Library Path Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-109
  (July 23, 2008)
  Mozilla Firefox URI Splitting Security Bypass Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-108
  (July 14, 2008)
  Multiple Vulnerabilities in Linux Kernel
  
  
• CERT-In Vulnerability Note CIVN-2008-107
  (July 14, 2008)
  Wireshark Packet reassembly Denial of Service Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-106
  (July 14, 2008)
  (Updated: August 14, 2008)
  Microsoft Access Snapshot Viewer ActiveX control remote code execution vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-105
  (July 11, 2008)
  Vulnerability in Solaris snmpXdmid
  
  
• CERT-In Vulnerability Note CIVN-2008-104
  (July 10, 2008)
  (Updated: August 14, 2008)
  Microsoft Word Memory Corruption Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-103
  (July 10, 2008)
  Microsoft SQL server Elevation of Privilege Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-102
  (July 10, 2008)
  Microsoft Outlook Web Access for Exchange Server XSS Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-101
  (July 10, 2008)
  Microsoft Windows Saved Search Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-100
  (July 10, 2008)
  Microsoft Windows DNS Spoofing Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-99
  (July 07, 2008)
  Cisco Wide Area Application Services (WAAS) Common UNIX Printing System (CUPS) Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-98
  (July 04, 2008)
  Multiple Vulnerabilities in Wireshark 0.9.5 to 1.0.0
  
  
• CERT-In Vulnerability Note CIVN-2008-97
  (July 04, 2008)
  Multiple vulnerabilities in Opera Software
  
  
• CERT-In Vulnerability Note CIVN-2008-96
  (July 01, 2008)
  Multiple Vulnerabilities in Cisco Unified Communications Manager
  
  
• CERT-In Vulnerability Note CIVN-2008-95
  (June 27, 2008)
  Microsoft Internet Explorer 6 Cross-Domain Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-94
  (June 27, 2008)
  (Updated: July 23, 2008)
  Remote Code Execution Vulnerability in Mozilla Products
  
  
• CERT-In Vulnerability Note CIVN-2008-93
  (June 25, 2008)
  Adobe Reader and Adobe Acrobat JavaScript method handling remote code execution Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-92
  (June 24, 2008)
  Linux Kernel "pppol2tp_recvmsg()" Denial of Service
  Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-91
  (June 20, 2008)
  Multiple vulnerabilities in the Solaris X Server
  
  
• CERT-In Vulnerability Note CIVN-2008-90
  (June 20, 2008)
  Cisco Intrusion Prevention System Jumbo Frame Denial of Service Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-89
  (June 19, 2008)
  Vulnerability in the Solaris 10 Event Port Implementation
  
  
• CERT-In Vulnerability Note CIVN-2008-88
  (June 19, 2008)
  Vulnerability of Local Denial of Service Sun Solaris
  UltraSPARC Kernel Module
  
  
• CERT-In Vulnerability Note CIVN-2008-87
  (June 19, 2008)
  Denial of Service (DoS) Vulnerability in the Solaris
  e1000g(7D) Gigabit Ethernet Driver
  
  
• CERT-In Vulnerability Note CIVN-2008-86
  (June 18, 2008)
  Multiple vulnerabilities in Apache HTTP Server 2.2.x
  
  
• CERT-In Vulnerability Note CIVN-2008-85
  (June 13, 2008)
  Integer overflow Vulnerability in OpenOffice.org
  
  
• CERT-In Vulnerability Note CIVN-2008-84
  (June 13, 2008)
  Linux Kernel ASN.1 BER Decoding Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-83
  (June 12, 2008)
  Microsoft Pragmatic General Multicast Denial of Service Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-82
  (June 12, 2008)
  Microsoft Active Directory Remote Denial of Service
  
  
• CERT-In Vulnerability Note CIVN-2008-81
  (June 10, 2008)
  Microsoft WINS Elevation of Privilege Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-80
  (June 12, 2008)
  Microsoft DirectX MJPEG Decoder and SAMI Format parsing vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-79
  (June 12, 2008)
  Microsoft Windows Speech API Remote Code Execution
  
  
• CERT-In Vulnerability Note CIVN-2008-78
  (June 12, 2008)
  Microsoft Internet Explorer Memory corruption and Information Disclosure Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-77
  (June 12, 2008)
  (Updated:June 20, 2008)
  Microsoft Windows Bluetooth Stack Allows Remote Code Execution Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-76
  (June 10, 2008)
  Adobe Acrobat Reader Arbitrary Code Execution and Unspecified Remote Denial-of-Service Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-75
  (June 06, 2008)
  Vulnerability in Solaris Corntab
  
  
• CERT-In Vulnerability Note CIVN-2008-74
  (June 06, 2008)
  Vulnerability in Solaris Samba Domain logons
  
  
• CERT-In Vulnerability Note CIVN-2008-73
  (June 05, 2008)
  OpenSSL Multiple Denial of Service Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-72
  (June 05, 2008)
  Sun Java System Web Server Advanced Search Mechanism Cross Site Scripting Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-71
  (June 05, 2008)
  Apache Tomcat Host Manager "name" Cross-Site Scripting Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-70
  (June 04, 2008)
  (Updated:24 June, 2008)
  Apple Safari Client-side Code Execution Vulnerability on
  Microsoft Windows Systems
  
  
• CERT-In Vulnerability Note CIVN-2008-69
  (May 30, 2008)
  CiscoWorks Common Services Arbitrary Code Execution Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-68
  (May 30, 2008)
  Adobe Flash Player Unspecified Remote Code Execution Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-67
  (May 28, 2008)
  Cisco Service Control Engine Denial of Service Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-66
  (May 28, 2008)
  Cisco Unified Customer Voice Portal Privilege Escalation Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-65
  (May 28, 2008)
  Cisco IOS SSH Server Improper Memory Access Denial of Service Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-64
  (May 27, 2008)
  ”ipip6_rcv” Denial of Service Vulnerability in Linux Kernel
  
  
• CERT-In Vulnerability Note CIVN-2008-63
  (May 23, 2008)
  Cisco Unified Communications Manager Denial of Service Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-62
  (May 23, 2008)
  Cisco Unified Presence Denial of Service Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-61
  (May 23, 2008)
  Cisco Content Switching Module Memory Leak Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-60
  (May 15, 2008)
  Print Service Vulnerability in Solaris
  
  
• CERT-In Vulnerability Note CIVN-2008-59
  (May 14, 2008)
  Microsoft Malware Protection Engine Input Validation Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-58
  (May 14, 2008)
  Microsoft Publisher Object Handler Validation Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-57
  (May 14, 2008)
  Microsoft Word Memory corruption Remote Code Execution Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-56
  (May 13, 2008)
  Microsoft Windows I2O Filter Utility Driver (i2omgmt.sys) Local Privilege Escalation Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-55
  (May 13, 2008)
  Vulnerabilities in the Tcl/Tk GUI Toolkit Library in Solaris
  
  
• CERT-In Vulnerability Note CIVN-2008-54
  (May 06, 2008)
  Multiple Vulnerabilities in Linux Kernel
  
  
• CERT-In Vulnerability Note CIVN-2008-53
  (May 06, 2008)
  Microsoft Works WkImgSrv.dll ActiveX Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-52
  (May 06, 2008)
  Microsoft HeartbeatCtl ActiveX control buffer overflow Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-51
  (May 01, 2008)
  Multiple Vulnerabilities in Red Hat Directory Server
  
  
• CERT-In Vulnerability Note CIVN-2008-50
  (May 01, 2008)
  Opera Web Browser Multiple Remote Code Execution Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-49
  (May 01, 2008)
  Multiple Remote code Execution Vulnerabilities in OpenOffice.org
  
  
• CERT-In Vulnerability Note CIVN-2008-48
  (April 29, 2008)
  Cisco Network Admission Control Shared Secret Disclosure Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-47
  (April 23, 2008)
  JavaScript Garbage Collector Vulnerability in Mozilla Products
  
  
• CERT-In Vulnerability Note CIVN-2008-46
  (April 19, 2008)
  Microsoft Windows SeImpersonatePrivilege Local Privilege Escalation Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-45
  (April 11, 2008)
  Microsoft Internet Explorer Popup Window Address Bar URI spoofing vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-44
  (April 10, 2008)
  Windows Kernel Elevation of Privilege Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-43
  (April 10, 2008)
  Microsoft Data Stream Handling Memory Corruption Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-42
  (April 10, 2008)
  Microsoft Internet Explorer 'hxvz.dll' ActiveX Control Memory Corruption Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-41
  (April 10, 2008)
  Microsoft Windows VBScript and JScript Remote Code Execution Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-40
  (April 10, 2008)
  Microsoft windows GDI Files Remote Code Execution Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-39
  (April 10, 2008)
  Microsoft DNS stub resolver Spoofing Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-38
  (April 10, 2008)
  Microsoft Visio Object Header and Memory Validation Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-37
  (April 10, 2008)
  Microsoft Project Memory Validation Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-36
  (April 09, 2008)
  Apache-SSL Authentication Bypass Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-35
  (April 07, 2008)
  OpenSSH Forwarded X11 Connection Information Disclosure Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-34
  (April 04, 2008)
  Microsoft Crypto API X.509 Certificate Validation Remote Information Disclosure Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-33
  (April 04, 2008)
  Cisco Unified Communications Disaster Recovery Framework Command Execution Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-32
  (March 20, 2008)
  CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-31
  (March 20, 2008)
  Cisco Secure Access Control Server for Windows User-Changeable Password Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-30
  (March 18, 2008)
  (Update:July 31, 2008)
  RealPlayer ActiveX controls “Console” property heap memory corruption vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-29
  (March 13, 2008)
  GNOME Evolution Encrypted Message Format String Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-28
  (March 12, 2008)
  Multiple Remote Code Execution Vulnerabilities in Microsoft Office Web Components
  
  
• CERT-In Vulnerability Note CIVN-2008-27
  (March 12, 2008)
  Multiple Remote Code Execution Vulnerabilities in Microsoft Office
  
  
• CERT-In Vulnerability Note CIVN-2008-26
  (March 12, 2008)
  Microsoft Outlook "mailto:" URI Handling Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-25
  (March 12, 2008)
  Microsoft Excel Multiple Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-24
  (March 7, 2008)
  MIME External-Body Heap Overflow Vulnerability in Mozilla Products
  
  
• CERT-In Vulnerability Note CIVN-2008-23
  (March 3, 2008)
  Symantec Products Symantec Decomposer RAR File Handling Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-22
  (February 20, 2008)
  Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-21
  (February 20, 2008)
  SQL injection vulnerability in Cisco Unified Communications Manager
  
  
• CERT-In Vulnerability Note CIVN-2008-20
  (February 13, 2008)
  Microsoft Office Object Parsing Memory Corruption Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-19
  (February 13, 2008)
  Microsoft Office Publisher Invalid Memory Reference
  and Memory Corruption Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-18
  (February 13, 2008)
  Microsoft Works File Converter Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-17
  (February 13, 2008)
  HTML Rendering Memory Corruption, Property Memory Corruption, Argument handling memory corruption and ActiveX object memory corruption vulnerabilities in Microsoft Internet Explorer
  
  
• CERT-In Vulnerability Note CIVN-2008-16
  (February 13, 2008)
  Microsoft Word Memory Corruption Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-15
  (February 13, 2008)
  Microsoft Object Linking and Embedding (OLE) Automation
  Heap Based Buffer Overflow Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-14
  (February 13, 2008)
  Microsoft Windows WebDAV Mini-Redirector Buffer Overflow Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-13
  (February 13, 2008)
  Remote Code Execution Vulnerability in Microsoft Internet Information Services (IIS)
  
  
• CERT-In Vulnerability Note CIVN-2008-12
  (February 13, 2008)
  Microsoft IIS File Change Notification vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-11
  (February 13, 2008)
  Windows Vista DHCP Packet Handling Denial of Service Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-10
  (February 13, 2008)
  Microsoft Active Directory Denial of Service Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-09
  (January 24, 2008)
  libxml2 Denial of Service Vulnerability in Solaris
  
  
• CERT-In Vulnerability Note CIVN-2008-08
  (January 24, 2008)
  libdevinfo(3LIB) - unauthorized file-access vulnerability in Solaris
  
  
• CERT-In Vulnerability Note CIVN-2008-07
  (January 24, 2008)
  dotoprocs() Routine Denial of Service Vulnerability in Solaris
  
  
• CERT-In Vulnerability Note CIVN-2008-06
  (January 22, 2008)
  Winamp Ultravox Streaming Metadata Parsing Remote Buffer Overflow Vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-05
  (January 19, 2008)
  (Update:March 13, 2008)
  Remote Code Execution Vulnerability in Microsoft office Excel
  
  
• CERT-In Vulnerability Note CIVN-2008-04
  Updated: February 07, 2008
  (January 14, 2008)
  Apple QuickTime RTSP buffer overflow vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-03
  (January 09, 2008)
  Microsoft Windows LSASS Privilege Escalation Vulnerability
  
  
• CERT-In Vulnerability Note CIVN-2008-02
  (January 09, 2008)
  Microsoft Windows TCP/IP implementation vulnerabilities
  
  
• CERT-In Vulnerability Note CIVN-2008-01
  (January 09, 2008)
  Real Player Unspecified Buffer Overflow Vulnerability
  
  
  

< Previous - - Next>