Notes by Severity Metric

• MetricIDDate PublicTitle
• 15.45VU#7592732006-02-02Mozilla QueryInterface memory corruption vulnerability
• 15.44VU#2186212005-07-12Microsoft Word buffer overflow in font processing routine
• 15.39VU#6714442000-11-20Input validation error in quikstore.cgi allows attackers to execute commands
• 15.31VU#4701512012-01-17Linux Kernel local privilege escalation via SUID /proc/pid/mem write
• 15.3VU#2989582006-02-24Oracle Diagnostic Tools do not properly authenticate users
• 15.3VU#3447182004-03-19Norton AntiSpam contains boundary error within the "SymSpamHelper Class" (symspam.dll) ActiveX component.
• 15.26VU#8006352002-01-25rsync fails to properly handle negative values specified for signed integers thereby allowing remote command execution
• 15.18VU#1051052007-06-05Computer Associates Anti-Virus engine fails to properly handle malformed CAB archives
• 15.18VU#1381882006-06-13Microsoft Outlook Web Access for Exchange Server script injection vulnerability
• 15.18VU#3931952002-02-21Yahoo! Messenger allows arbitrary users to be added to buddy list without proper authorization
• 15.18VU#4984402001-03-12Multiple TCP/IP implementations may use statistically predictable initial sequence numbers
• 15.18VU#5563562003-07-23Microsoft SQL Server contains flaw in checking method for the named pipe
• 15.18VU#7005752001-12-20Buffer overflows in Microsoft SQL Server 7.0 and SQL Server 2000
• 15.18VU#8869532000-12-01IBM AIX setsenv buffer overflow
• 15.14VU#4417852007-02-22SupportSoft ActiveX controls contain multiple buffer overflows