deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-4537
Published: 2008-10-10
Description: Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.1.1-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17336 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4536.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN26621646/index.html; http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000062.html; http://secunia.com/advisories/32065
CVE: CVE-2008-3271
Published: 2008-10-13
Description: Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a "synchronization problem" and lack of thread safety, and related to RemoteFilterValve, RemoteAddrValve, and RemoteHostValve.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN30732239/index.html; http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000069.html; http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html
CVE: CVE-2008-3544
Published: 2008-10-13
Description: Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, and possibly 7.01, 7.50, and 7.53, allow remote attackers to execute arbitrary code via a long (1) REQUEST_SEV_CHANGE (aka number 47), (2) REQUEST_SAVE_STATE (aka number 61), or (3) REQUEST_RESTORE_STATE (aka number 62) request to TCP port 2954.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/closedview_old-adv.txt; http://downloads.securityfocus.com/vulnerabilities/exploits/28668.c; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01537275
CVE: CVE-2008-3545
Published: 2008-10-13
Description: Unspecified vulnerability in ovtopmd in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3536, CVE-2008-3537, and CVE-2008-3544.  NOTE: due to insufficient details from the vendor, it is not clear whether this is the same as CVE-2008-1853.
CVSS Score: 7.8 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4075&w=2; http://secunia.com/advisories/29796; http://securityreason.com/securityalert/4399
CVE: CVE-2008-4411
Published: 2008-10-13
Description: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.15.210 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-1663.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9626&w=2; http://secunia.com/advisories/32199; http://securityreason.com/securityalert/4398
CVE: CVE-2008-4540
Published: 2008-10-13
Description: Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://securityreason.com/securityalert/4402; http://www.securityfocus.com/archive/1/497151/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/45857
CVE: CVE-2008-4541
Published: 2008-10-13
Description: Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=747; http://secunia.com/advisories/32227; http://securitytracker.com/id?1021038
CVE: CVE-2008-4542
Published: 2008-10-13
Description: Cross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1)ES56, and 7.x before 7.0(2)ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database (aka data store).
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/32207; http://securitytracker.com/id?1021012; http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html
CVE: CVE-2008-4543
Published: 2008-10-13
Description: Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of service (session exhaustion) via a large number of connections.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/32187; http://securitytracker.com/id?1021013; http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html
CVE: CVE-2008-4544
Published: 2008-10-13
Description: Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1021020; http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html; http://www.securityfocus.com/bid/31642
CVE: CVE-2008-4545
Published: 2008-10-13
Description: Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/32187; http://securitytracker.com/id?1021022; http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html
CVE: CVE-2008-4441
Published: 2008-10-14
Description: The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is enabled, does not properly parse malformed 802.11 frames, which allows remote attackers to cause a denial of service (reboot or hang-up) via a malformed association request containing the WEP flag, as demonstrated by a request that is too short, a different vulnerability than CVE-2008-1144 and CVE-2008-1197.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/32259; http://securityreason.com/securityalert/4400; http://www.securityfocus.com/archive/1/497285/100/0/threaded
CVE: CVE-2008-4546
Published: 2008-10-14
Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two responses that provide SWF files with different SWF version numbers.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
CVE: CVE-2008-4547
Published: 2008-10-14
Description: Heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control (pdvratl.dll) in DVRHOST Web CMS OCX 1.0.1.25 allows remote attackers to execute arbitrary code via a long second argument to the TimeSpanFormat method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28443; http://securityreason.com/securityalert/4407; http://www.securityfocus.com/bid/27267
CVE: CVE-2008-4548
Published: 2008-10-14
Description: Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control (CamPanel.dll) in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28435; http://securityreason.com/securityalert/4411; http://www.securityfocus.com/bid/27304
CVE: CVE-2008-4549
Published: 2008-10-14
Description: The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method.
CVSS Score: 2.6 (LOW)
CWE: CWE-20
References: http://osvdb.org/40628; http://secunia.com/advisories/28644; http://securityreason.com/securityalert/4410
CVE: CVE-2008-4551
Published: 2008-10-14
Description: strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpz_export function in the GNU Multiprecision Library (GMP).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://download.strongswan.org/CHANGES4.txt; http://labs.mudynamics.com/advisories/MU-200809-01.txt; http://secunia.com/advisories/31963
CVE: CVE-2008-4552
Published: 2008-10-14
Description: The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.vmware.com/pipermail/security-announce/2010/000082.html; http://secunia.com/advisories/32346; http://secunia.com/advisories/32481
CVE: CVE-2008-3639
Published: 2008-10-14
Description: Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small image and a large row count.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=753; http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html; http://secunia.com/advisories/32084
CVE: CVE-2008-3640
Published: 2008-10-14
Description: Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=752; http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html; http://secunia.com/advisories/32084
CVE: CVE-2008-4385
Published: 2008-10-14
Description: Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab, sysreqlab.dll, sysreqlabsli.dll, or sysreqlab2.dll) and (2) a certain Java applet in RLApplet.class in sysreqlab2.jar or sysreqlab.jar.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/32236; http://www.kb.cert.org/vuls/id/166651; http://www.sec-consult.com/files/20081016-0_sysreqlab.txt
CVE: CVE-2008-4397
Published: 2008-10-14
Description: Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20, CWE-22
References: http://secunia.com/advisories/32220; http://securityreason.com/securityalert/4412; http://www.securityfocus.com/archive/1/497218
CVE: CVE-2008-4398
Published: 2008-10-14
Description: Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/32220; http://www.securityfocus.com/archive/1/497218; http://www.securityfocus.com/bid/31684
CVE: CVE-2008-4399
Published: 2008-10-14
Description: Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash) via a crafted request, related to "insufficient validation."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/32220; http://www.securityfocus.com/archive/1/497218; http://www.securityfocus.com/bid/31684
CVE: CVE-2008-4400
Published: 2008-10-14
Description: Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple services) via crafted authentication credentials, related to "insufficient validation."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/32220; http://www.securityfocus.com/archive/1/497218; http://www.securityfocus.com/bid/31684
CVE: CVE-2008-4555
Published: 2008-10-14
Description: Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements.
CVSS Score: 8.5 (HIGH)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=240636; http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html; http://roeehay.blogspot.com/2008/10/graphviz-buffer-overflow-code-execution.html
CVE: CVE-2008-2588
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 allows local users to affect confidentiality via unknown vectors.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021054
CVE: CVE-2008-2619
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite 11.5.10.2, allows remote authenticated users to affect availability via unknown vectors.
CVSS Score: 1.7 (LOW)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021054
CVE: CVE-2008-2624
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021050
CVE: CVE-2008-2625
Published: 2008-10-14
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue involves an authentication bypass by establishing a TNS connection and impersonating a user session via a crafted authentication message during proxy authentication mode.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securityfocus.com/archive/1/497539/100/0/threaded
CVE: CVE-2008-3975
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2008-3977.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021054
CVE: CVE-2008-3976
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-3413 and CVE-2009-3414.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021050
CVE: CVE-2008-3977
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2008-3975.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021054
CVE: CVE-2008-3980
Published: 2008-10-14
Description: Unspecified vulnerability in the Upgrade component in Oracle Database 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021050
CVE: CVE-2008-3982
Published: 2008-10-14
Description: Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3983 and CVE-2008-3984.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021050
CVE: CVE-2008-3983
Published: 2008-10-14
Description: Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and CVE-2008-3984.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021050
CVE: CVE-2008-3984
Published: 2008-10-14
Description: Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and CVE-2008-3983.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021050
CVE: CVE-2008-3985
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021057
CVE: CVE-2008-3986
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows local users to affect confidentiality via unknown vectors.
CVSS Score: 1.0 (LOW)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021054
CVE: CVE-2008-3987
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle Discoverer Desktop component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors.
CVSS Score: 1.0 (LOW)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021054
CVE: CVE-2008-3988
Published: 2008-10-14
Description: Unspecified vulnerability in the iSupplier Portal component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021057
CVE: CVE-2008-3989
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle Data Mining component in Oracle Database 10.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability, related to DMSYS.ODM_MODEL_UTIL.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021050
CVE: CVE-2008-3990
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to OLAPSYS.CWM2_OLAP_AW_AWUTIL, a different vulnerability than CVE-2008-3991.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021050
CVE: CVE-2008-3991
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to OLAPSYS.CWM2_OLAP_AW_AWUTIL, a different vulnerability than CVE-2008-3990.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021050
CVE: CVE-2008-3992
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle Data Mining component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to DMSYS.DBMS_DM_EXP_INTERNAL.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.vupen.com/english/advisories/2008/2825
CVE: CVE-2008-3993
Published: 2008-10-14
Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote authenticated users to affect integrity via unknown vectors.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021057
CVE: CVE-2008-3994
Published: 2008-10-14
Description: Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to WMSYS.LTADM.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/32291; http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html; http://www.securitytracker.com/id?1021050