Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0258 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Connection Manager component of Oracle Database server 8.1.7.4 and 9.0.1.5 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB03. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://w
w.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0259 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB04 and (2) DB06 in the (a) Data Pump component; (3) DB10 in the (b) Net Listener component; and (4) DB16 in the (c) Oracle Text component. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that DB06 is SQL injection in the GENERATE_JOB_NAME, GET_WORKERSTATUSLIST1010, GET_PARAMVALUES1010, GET_D
er that states that DB06 is SQL injection in the GENERATE_JOB_NAME, GET_WORKERSTATUSLIST1010, GET_PARAMVALUES1010, GET_DUMPFILESET1010, GET_JOBSTATUS1010, ATTACH, and ESTABLISH_REMOTE_CONTEXT functions in DBMS_DATAPUMP. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.osvdb.org/22544 - http://www.oracle.com/technetwork/topics/security/cpujan2006-0
glish/advisories/2006/0243 - http://www.osvdb.org/22544 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0260 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB05 in the (a) Data Pump component; (2) DB15 in the (b) Oracle Text component; (3) DB22 in the (c) Streams Apply component; (4) DB23 and (5) DB24 in the (d) Streams Capture component; and (6) DB26 in the (e) Streams Subcomponent. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states tha
navailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that DB05 involves SQL injection in the (f) LONG2VARCHAR, LONG2VCMAX, LONG2VCNT, and LONG2CLOB functions in the DBMS_METADATA_UTIL package; (g) MAKE_FILTER, FETCH_VIEWS_ERROR, FETCH_FILTERS, FETCH_VIEWS, SET_FILTER_COMMON, DO_FILTER_SCRIPT, SET_TABLE_FILTERS, and MAKE_FILTER_TEXT functions in the DBMS_METADATA_INT package; and (h) GET_PREPOST_TABLE_ACT function in the DBMS_METADATA package. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.osvdb.org/2263
s://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.osvdb.org/22637 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.osvdb.org/22543 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608 - http://www.osvdb.org/22643
CVE ID: CVE-2006-0261 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB07 in the Dictionary component and (2) DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed reliable researcher claims that DB07 involves plaintext storage of the TDE wallet password in a trace file by event 10053. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabil
10053. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24168 - http://www.securityfocus.com/bid/16287 - http://www.securityfocus.com/archive/1/422255/30/7430/threaded - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608 - http://www.red-database-security.com/advisory/oracle_tde_wallet_
006-082403.html - http://secunia.com/advisories/18608 - http://www.red-database-security.com/advisory/oracle_tde_wallet_password.html
CVE ID: CVE-2006-0262 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB08. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://secur
ish/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0263 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB09 in the (a) Net Listener component; and (2) DB12 and (3) DB13 in the Network Communications (RPC) component. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.osvdb.org/
https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.osvdb.org/22551 - http://www.osvdb.org/22547 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/870172 - http://www.us-cert.gov/cas/techalerts/TA06-018A.html - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0264 State: REJECTED Published: 2006-01-18T11:00:00 Last Updated: 2017-07-19T15:57:01 Description: No description available.
CVE ID: CVE-2006-0265 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB17 in the Oracle Text component and (2) DB18 in the Program Interface Network component. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that DB17 involves SQL injection in the (a) VALIDATE_STATEMENT and BUILD_DML functions in CTXSYS.DRILOAD; (b) CLEA
tates that DB17 involves SQL injection in the (a) VALIDATE_STATEMENT and BUILD_DML functions in CTXSYS.DRILOAD; (b) CLEAN_DML function in CTXSYS.DRIDML; (c) GET_ROWID function in CTXSYS.CTX_DOC; (d) BROWSE_WORDS function in CTXSYS.CTX_QUERY; and (e) ODCIINDEXTRUNCATE, ODCIINDEXDROP, and ODCIINDEXDELETE functions in CATINDEXMETHODS. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://
/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.osvdb.org/22640 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.osvdb.org/22642 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608 - http://www.osvdb.org/22639 - http://www.osvdb.org/22641
CVE ID: CVE-2006-0266 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB19. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 -
ttp://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0267 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.2.0.6 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB20. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www
securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0268 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Security component of Oracle Database server 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB21. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?101
323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0269 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Streams Capture component of Oracle Database server 10.1.0.5 and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB25. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the SET_DIRECTORY_ROOT function in the DBMS_CDC_PUBLISH package. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22563 - https://exchan
SH package. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0270 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB27. NOTE: Oracle has not disputed a reliable researcher report that TDA stores the master key without encryption, which allows local users to obtain the key via the SGA. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24186 - https://exchange.xforce.ibmcloud.com/vulne
r: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608 - http://www.securityfocus.com/archive/1/422262/30/7400/threaded - http://www.red-database-security.com/advisory/oracle_tde_unencrypted_sga.html
CVE ID: CVE-2006-0271 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB28. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the DBMS_REGISTRY package in certain parameters to the (1) IS_COMPONENT, (2) GET_COMP_OPTION, (3) DISABLE_DDL_TRIGGERS, (4) SCRIPT_EXISTS, (5) COMP_PAT
rtain parameters to the (1) IS_COMPONENT, (2) GET_COMP_OPTION, (3) DISABLE_DDL_TRIGGERS, (4) SCRIPT_EXISTS, (5) COMP_PATH, (6) GATHER_STATS, (7) NOTHING_SCRIPT, and (8) VALIDATE_COMPONENTS functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://www.osvdb.org/22566 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://ww
.osvdb.org/22566 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0272 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB29. NOTE: based on mutual credits by the relevant sources, it is highly likely that this issue is a buffer overflow in the (a) DBMS_XMLSCHEMA and (b) DBMS_XMLSCHEMA_INT packages, as exploitable via long arguments to (1) XDB.DBMS_XMLSCHEMA.GENERATESCHEMA or (2) XDB.DBMS_XMLSCHEMA.GENERATESCHEMAS. Additional Analyst Notes: - CVE Program Container: Refere
HEMA.GENERATESCHEMA or (2) XDB.DBMS_XMLSCHEMA.GENERATESCHEMAS. Additional Analyst Notes: - CVE Program Container: References: - http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0893.html - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.us-cert.gov/cas/techalerts/TA06-018A.html - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english
018A.html - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608 - http://www.kb.cert.org/vuls/id/891644 - http://www.argeniss.com/research/ARGENISS-ADV-010601.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24376
CVE ID: CVE-2006-0273 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Portal component of Oracle Application Server 9.0.4.2 and 10.1.2.0 has unspecified impact and attack vectors, as identified by Oracle Vuln# AS01. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen
tyfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0274 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 and 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP03. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?10154
3 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0275 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP04. NOTE: Oracle has not disputed reliable researcher claims that this issue is related to directory traversal that allows reading of portions of arbitrary XML files via the customize parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/
ram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608 - http://www.red-database-security.com/advisory/oracle_reports_read_any_xml_file.html - http://www.securityfocus.com/archive/1/422261/30/7430/threaded
CVE ID: CVE-2006-0276 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) OCS01, 2) OCS02, 3) OCS03, 4) OCS04, 5) OCS05, 6) OCS06, 7) OCS07, (8) OCS08, and (9) OCS09 in the (a) Email Server component; 10) OCS10 (and (11) OCS11 in the (b) Oracle Collaboration Suite Wireless & Voice (component; 12) OCS12 and (13) OCS13 in the (c) Oracle Content (Management SDK component; 14) OCS14 and (15) OCS15 in the (d) Oracle (Content
and (13) OCS13 in the (c) Oracle Content (Management SDK component; 14) OCS14 and (15) OCS15 in the (d) Oracle (Content Services component. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608