Notes by Severity Metric

• MetricIDDate PublicTitle
• 0VU#3324122012-10-15Novell ZENworks Asset Management 7.5 web console information disclosure vulnerability
• 0VU#3389562009-02-04DOMIT! RSS testing_domitrss.php discloses local files
• 0VU#340432000-07-16rpc.statd vulnerable to remote root compromise via format string stack overwrite
• 0VU#3452602013-03-07GroundWork Monitor Enterprise contains multiple vulnerabilities
• 0VU#3598162012-04-27Oracle database TNS listener vulnerability
• 0VU#3603412010-01-19BIND 9 DNSSEC validation code could cause fake NXDOMAIN responses
• 0VU#3708682013-03-21CoreFTP contains a buffer overflow vulnerability
• 0VU#3751802013-04-15Arecont Vision model AV1355DN camera vulnerable to denial of service
• 0VU#3779152012-07-11SMC SMC8024L2 switch web interface authentication bypass
• 0VU#3800392013-01-08Ruby on Rails Action Pack framework insecurely typecasts YAML and Symbol XML parameters
• 0VU#3816992012-06-04ISC BIND 9 zero length rdata named vulnerability
• 0VU#383362000-05-16MIT Kerberos 5 ksu may allow either the '-r' or '-l' time-interval parameter to overflow the stack with the characters ''d', 'h', 'm', or 's'
• 0VU#3897952012-09-17Windows Phone 7 does not check certificate Common Names when sending or receiving emails over SSL.
• 0VU#3998962007-07-03GIMP integer overflow vulnerability
• 0VU#4006192012-04-10Pluck SiteLife software multiple XSS vulnerabilities
• 0VU#4040512012-07-20Dell SonicWALL Scrutinizer SQL injection vulnerability
• 0VU#4065962013-03-18Askiaweb survey application contains multiple vulnerabilities
• 0VU#4080992012-08-31CA ARCserve Backup authentication service denial-of-service vulnerability
• 0VU#4188612009-11-19BIND DNS Nameserver, DNSSEC validation Vulnerability
• 0VU#4189232013-04-03C2 WebResource web interface XSS vulnerability