deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-1247
Published: 2006-04-19
Description: rm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://secunia.com/advisories/19656; http://securitytracker.com/id?1015952; http://www-1.ibm.com/support/docview.wss?uid=isg1IY82357
CVE: CVE-2006-1828
Published: 2006-04-19
Description: SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL commands and execute arbitrary code via the sess_username variable, as set by the php121un HTTP COOKIE parameter, which is used in multiple files including php121login.php.  NOTE: the code execution occurs because the SQL query results are used in an include statement.
CVSS Score: 5.1 (MEDIUM)
References: http://retrogod.altervista.org/php121im_14_sql_xpl.html; http://secunia.com/advisories/19643; http://securitytracker.com/id?1015936
CVE: CVE-2006-1829
Published: 2006-04-19
Description: EAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users, possibly guests, to obtain password credentials of arbitrary users via unspecified vectors involving (1) connection caches, (2) open password prompts, and (3) stored custom connection profiles.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/19605; http://securitytracker.com/id?1015913; http://www.securityfocus.com/bid/17508
CVE: CVE-2006-1830
Published: 2006-04-19
Description: Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors.
CVSS Score: 3.7 (LOW)
References: http://secunia.com/advisories/19632; http://securitytracker.com/id?1015930; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102292-1
CVE: CVE-2006-1831
Published: 2006-04-19
Description: Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allows remote attackers to execute arbitrary commands via a leading ; (semicolon) in the name parameter in a systemdoc action, which is injected into phpinfo.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19690; http://www.securityfocus.com/bid/17523; http://www.vupen.com/english/advisories/2006/1360
CVE: CVE-2006-1832
Published: 2006-04-19
Description: sysinfo.cgi in sysinfo 1.21 allows remote attackers to obtain the installation path via the debugger action.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19690; http://www.securityfocus.com/bid/17523; http://www.vupen.com/english/advisories/2006/1360
CVE: CVE-2006-1833
Published: 2006-04-19
Description: Intel RNG Driver in NetBSD 1.6 through 3.0 may incorrectly detect the presence of the pchb interface, which will cause it to always generate the same random number, which allows remote attackers to more easily crack encryption keys generated from the interface.
CVSS Score: 2.6 (LOW)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-009.txt.asc; http://secunia.com/advisories/19585; http://securitytracker.com/id?1015907
CVE: CVE-2006-1834
Published: 2006-04-19
Description: Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check.  NOTE: a sign extension problem makes the attack easier with shorter strings.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-189
References: http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1891&w=2; http://secunia.com/advisories/20117
CVE: CVE-2006-1835
Published: 2006-04-19
Description: Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/19710; http://securityreason.com/securityalert/727; http://securitytracker.com/id?1015954
CVE: CVE-2006-1836
Published: 2006-04-19
Description: Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/19682; http://securityreason.com/securityalert/100; http://securityresponse.symantec.com/avcenter/security/Content/2006.04.17b.html
CVE: CVE-2006-1837
Published: 2006-04-19
Description: SQL injection vulnerability in archiv2.php in Fuju News 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19677; http://www.securityfocus.com/bid/17572; http://www.vupen.com/english/advisories/2006/1374
CVE: CVE-2006-1838
Published: 2006-04-19
Description: edit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19677; http://www.securityfocus.com/bid/17572; http://www.vupen.com/english/advisories/2006/1374
CVE: CVE-2006-1839
Published: 2006-04-19
Description: PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the data_dir parameter, which satisfies the file_exists function call.
CVSS Score: 7.5 (HIGH)
References: http://retrogod.altervista.org/phpalbum_0323_incl_xpl.html; http://secunia.com/advisories/19661; http://www.osvdb.org/24741
CVE: CVE-2006-1840
Published: 2006-04-19
Description: Multiple format string vulnerabilities in Empire Server before 4.3.1 allow attackers to cause a denial of service (crash) via the (1) load, (2) spy and (3) bomb functions.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-134
References: http://secunia.com/advisories/19674; http://sourceforge.net/project/shownotes.php?release_id=410001&group_id=24031; http://www.osvdb.org/24700
CVE: CVE-2006-1841
Published: 2006-04-19
Description: Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the key parameter, as used by the search field.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/19711; http://www.securityfocus.com/archive/1/431120/100/0/threaded; http://www.securityfocus.com/bid/17550
CVE: CVE-2006-1842
Published: 2006-04-19
Description: Cross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) NAME and (2) COMMENTS parameters.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/19704; http://securitytracker.com/id?1015958; http://www.securityfocus.com/archive/1/431130/100/0/threaded
CVE: CVE-2006-1843
Published: 2006-04-19
Description: Cross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) LOCATION and (2) URL parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/19704; http://www.vupen.com/english/advisories/2006/1385; https://exchange.xforce.ibmcloud.com/vulnerabilities/25862
CVE: CVE-2006-1844
Published: 2006-04-19
Description: The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356939; http://secunia.com/advisories/19170; http://www.osvdb.org/23922
CVE: CVE-2006-1845
Published: 2006-04-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-0537.  Reason: This candidate is a duplicate of CVE-2006-0537.  Notes: All CVE users should reference CVE-2006-0537 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-1846
Published: 2006-04-19
Description: Cross-site scripting (XSS) vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to inject arbitrary HTML and web script via the ublock parameter, which is saved in the user's personal menu.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition, it is unclear whether this issue is a vulnerability, since it is related to the user's personal menu, which presumably is not modifiable by others.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18972; http://www.osvdb.org/23431; http://www.securityfocus.com/bid/16774
CVE: CVE-2006-1847
Published: 2006-04-19
Description: SQL injection vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to execute arbitrary SQL commands via the user_id parameter in the Your_Home functionality.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18972; http://www.osvdb.org/23432; http://www.securityfocus.com/bid/16774
CVE: CVE-2006-1848
Published: 2006-04-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in stats_view.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, and (3) date parameter.
CVSS Score: 2.6 (LOW)
References: http://d4igoro.blogspot.com/2006/04/linpha-xss-vulnerabilities.html; http://secunia.com/advisories/19679; http://www.securityfocus.com/archive/1/431242/100/0/threaded
CVE: CVE-2006-1849
Published: 2006-04-19
Description: Multiple SQL injection vulnerabilities in members_only/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) position and (2) id parameter.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html; http://secunia.com/advisories/19707; http://www.securityfocus.com/bid/17614
CVE: CVE-2006-1850
Published: 2006-04-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) level, (2) position, (3) id, and (4) action parameters to members_only/index.cgi, and the (5) page parameter to customer_area/index.cgi.
CVSS Score: 2.6 (LOW)
References: http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html; http://secunia.com/advisories/19707; http://www.securityfocus.com/bid/17614
CVE: CVE-2006-1851
Published: 2006-04-19
Description: xFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the application via the (1) action parameter to members_only/index.cgi and (2) page parameter customer_area/index.cgi, probably due to invalid values.
CVSS Score: 5.0 (MEDIUM)
References: http://pridels0.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html; http://www.securityfocus.com/bid/17614; https://exchange.xforce.ibmcloud.com/vulnerabilities/25855
CVE: CVE-2006-1852
Published: 2006-04-19
Description: SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2006/04/article-publisher-pro-sql-inj.html; http://www.osvdb.org/24730; https://exchange.xforce.ibmcloud.com/vulnerabilities/25898
CVE: CVE-2006-1853
Published: 2006-04-19
Description: Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execute arbitrary SQL commands via the (1) id parameter in (a) user.php, or (2) where and (3) order parameters to (b) admin.php.
CVSS Score: 6.5 (MEDIUM)
References: http://pridels0.blogspot.com/2006/04/modernbill-multiple-sql-inj-vuln.html; http://secunia.com/advisories/19641; http://www.securityfocus.com/bid/17596
CVE: CVE-2006-1854
Published: 2006-04-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML during a login action via the (1) Account Name and (2) Username field.  NOTE: the vendor has disputed this vulnerability, saying that "it does not exist currently in the Bluepay 2.0 product," and older versions might not have been affected either.  As of 20060512, CVE has not formally investigated this dispute
CVSS Score: 2.6 (LOW)
References: http://pridels0.blogspot.com/2006/04/bluepay-manager-v20-script-insertion.html; http://pridels0.blogspot.com/2006/04/bluepay-manager-v20-script-insertion.html
CVE: CVE-2006-1524
Published: 2006-04-19
Description: madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC permissions and replace portions of readonly tmpfs files with zeroes, aka the MADV_REMOVE vulnerability.  NOTE: this description was originally written in a way that combined two separate issues.  The mprotect issue now has a separate name, CVE-2006-2071.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6; http://lwn.net/Alerts/180820/; http://secunia.com/advisories/19657
CVE: CVE-2006-1525
Published: 2006-04-19
Description: ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service (panic) via a request for a route for a multicast IP address, which triggers a null dereference.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.8; http://lwn.net/Alerts/180820/; http://secunia.com/advisories/19709
CVE: CVE-2006-1056
Published: 2006-04-20
Description: The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:14.fpu.asc; http://kb.vmware.com/kb/2533126; http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9
CVE: CVE-2006-1866
Published: 2006-04-20
Description: Multiple unspecified vulnerabilities in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and other versions have unknown impact and attack vectors in the (1) Advanced Replication component, as identified by Vuln# DB01, and (2) Oracle Spatial component, as identified by Vuln# DB10.  NOTE: details are unavailable from Oracle, but as of 20060421, they have not publicly disputed a claim by a reliable independent researcher that states that DB01 is an unknown issue in the DBMS_REPUTIL package, and DB10 is SQL injection in the INSERT_CATALOG, UPDATE_CATALOG, and DELETE_CATALOG functions of the SDO_CATALOG package.
CVSS Score: 9.7 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1867
Published: 2006-04-20
Description: Unspecified vulnerability in Oracle Database Server 9.2.0.6 has unknown impact and attack vectors in the Advanced Replication component, aka Vuln# DB02.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1868
Published: 2006-04-20
Description: Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1869
Published: 2006-04-20
Description: Unspecified vulnerability in Oracle Database Server 8.1.7.4 and 9.0.1.5 has unknown impact and attack vectors in the Dictionary component, aka Vuln# DB04.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1870
Published: 2006-04-20
Description: Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors in the Export component, aka Vuln# DB05.  NOTE: details are unavailable from Oracle, but as of 20060427, they have not publicly commented on whether DB05 is the same issue as CVE-2006-2081.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1871
Published: 2006-04-20
Description: SQL injection vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.5 allows remote attackers to execute arbitrary SQL commands via the DELETE_FROM_TABLE function in the DBMS_LOGMNR_SESSION (Log Miner) package, aka Vuln# DB06.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045280.html; http://secunia.com/advisories/19712; http://secunia.com/advisories/19859
CVE: CVE-2006-1872
Published: 2006-04-20
Description: Unspecified vulnerability in Oracle Database Server 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors in the Oracle Enterprise Manager Intelligent Agent component, aka Vuln# DB07.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1873
Published: 2006-04-20
Description: Unspecified vulnerability in Oracle Database Server 9.2.0.7, 10.1.0.4, and 10.2.0.1 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB08.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1874
Published: 2006-04-20
Description: Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB09.  NOTE: Oracle has not disputed reliable claims that this issue is SQL injection in MDSYS.PRVT_IDX using the (1) EXECUTE_INSERT, (2) EXECUTE_DELETE, (3) EXECUTE_UPDATE, (4) EXECUTE UPDATE, and (5) CRT_DUMMY functions.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1875
Published: 2006-04-20
Description: Unspecified vulnerability in Oracle Database Server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB11.  NOTE: Oracle has not disputed reliable researcher claims that this issue is SQL injection in MDSYS.SDO_LRS_TRIG_INS.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1876
Published: 2006-04-20
Description: Unspecified vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.4 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB12.  NOTE: details are unavailable from Oracle, but as of 20060421, they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the (1) GEN_RID_RANGE_BY_AREA and (2) GEN_RID_RANGE functions in the MDSYS.SDO_PRIDX package.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1877
Published: 2006-04-20
Description: Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.7 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB13.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1878
Published: 2006-04-20
Description: Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/19652; http://securityreason.com/securityalert/719; http://securityreason.com/securityalert/760
CVE: CVE-2006-1879
Published: 2006-04-20
Description: Multiple unspecified vulnerabilities in the Email Server component in Oracle Collaboration Suite 9.0.4.2, 10.1.1, 10.1.2.0, and 10.1.2.1 have unknown impact and attack vectors, aka Vuln# (1) OCS01, (2) OCS02, (3) OCS03, and (4) OCS04.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1880
Published: 2006-04-20
Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln# (1) APPS01 in the (a) Application Install component; (2) APPS09 in the (b) Oracle Diagnostics Interfaces component; (3) APPS10 in the (c) Oracle General Ledger component; (4) APPS12 and (5) APPS13 in the (d) Oracle Receivables component.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1881
Published: 2006-04-20
Description: Unspecified vulnerability in the Financials for Asia/Pacific component in Oracle E-Business Suite and Applications 11.5.9 has unknown impact and attack vectors.  component, aka Vuln# APPS02.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1882
Published: 2006-04-20
Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unknown impact and attack vectors, as identified by Vuln# (1) APPS03 in (a) iProcurement; (2) APPS04 in (b) Oracle Application Object Library; (3) APPS06, (4) APPS07, and (5) APPS08 in (c) Oracle Applications Technology Stack; and (6) APPS11 in (d) Oracle Order Capture.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1883
Published: 2006-04-20
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite and Applications 11.5.10CU1 has unknown impact and attack vectors, aka Vuln# APPS05.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1884
Published: 2006-04-20
Description: Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961
CVE: CVE-2006-1885
Published: 2006-04-20
Description: Multiple unspecified vulnerabilities in the Reporting Framework component in Oracle Enterprise Manager 9.0.1.5 and 9.2.0.7 have unknown impact and attack vectors, aka Vuln# (1) EM01 and (2) EM02.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19712; http://secunia.com/advisories/19859; http://securitytracker.com/id?1015961