deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-0795
Published: 2012-07-17
Description: Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail address settings, which allows remote authenticated users to have an unspecified impact via a crafted address.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-13572; http://moodle.org/mod/forum/discuss.php?d=194014; http://www.debian.org/security/2012/dsa-2421
CVE: CVE-2012-0796
Published: 2012-07-17
Description: class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-94
References: http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=62988bf0bbc73df655f51884aaf1f523928abff9; http://moodle.org/mod/forum/discuss.php?d=194015; http://www.debian.org/security/2012/dsa-2421
CVE: CVE-2012-0797
Published: 2012-07-17
Description: The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a token.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-16
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28126; http://moodle.org/mod/forum/discuss.php?d=194016; https://bugzilla.redhat.com/show_bug.cgi?id=783532
CVE: CVE-2012-0798
Published: 2012-07-17
Description: The self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows remote authenticated users to obtain the manager role by leveraging the teacher role.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-29469; http://moodle.org/mod/forum/discuss.php?d=194017; https://bugzilla.redhat.com/show_bug.cgi?id=783532
CVE: CVE-2012-0799
Published: 2012-07-17
Description: Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by visiting the front page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-27334; http://moodle.org/mod/forum/discuss.php?d=194018; https://bugzilla.redhat.com/show_bug.cgi?id=783532
CVE: CVE-2012-0800
Published: 2012-07-17
Description: The form-autocompletion functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 makes it easier for physically proximate attackers to discover passwords by reading the contents of a non-password field, as demonstrated by accessing a create-groups page with Safari on an iPad device.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=6e9989dbd3f261b2e1586ff77b0bf22fc7091485; http://moodle.org/mod/forum/discuss.php?d=194019; https://bugzilla.redhat.com/show_bug.cgi?id=783532
CVE: CVE-2012-0801
Published: 2012-07-17
Description: lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a form element, which has unspecified impact and remote attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=51070abc78b9e1db1db9a44855e8623b22bebd48; http://moodle.org/mod/forum/discuss.php?d=194020; https://bugzilla.redhat.com/show_bug.cgi?id=783532
CVE: CVE-2012-0276
Published: 2012-07-17
Description: Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a (1) SGI32LogLum compressed TIFF image or (2) SGI32LogLum compressed TIFF image with the PhotometricInterpretation encoding set to LogL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858; http://secunia.com/advisories/48666; http://www.exploit-db.com/exploits/19337
CVE: CVE-2012-0277
Published: 2012-07-17
Description: Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PCT image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858; http://secunia.com/advisories/48666; http://www.exploit-db.com/exploits/19336
CVE: CVE-2012-0282
Published: 2012-07-17
Description: Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ImageLeftPosition value in an ImageDescriptor structure in a GIF image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://newsgroup.xnview.com/viewtopic.php?f=35&t=25858; http://secunia.com/advisories/48666; http://www.exploit-db.com/exploits/19335
CVE: CVE-2012-1571
Published: 2012-07-17
Description: file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119, CWE-125
References: http://mx.gw.com/pipermail/file/2012/000914.html; http://www.debian.org/security/2012/dsa-2422; http://www.mandriva.com/security/advisories?name=MDVSA-2012:035
CVE: CVE-2012-3240
Published: 2012-07-17
Description: The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges via a crafted REST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/49912; http://secunia.com/advisories/49916; http://www.eucalyptus.com/eucalyptus-cloud/security/esa-03
CVE: CVE-2012-3241
Published: 2012-07-17
Description: The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows remote attackers to execute arbitrary VMware Broker API commands.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/49912; http://secunia.com/advisories/49916; http://www.eucalyptus.com/eucalyptus-cloud/security/esa-04
CVE: CVE-2012-3355
Published: 2012-07-17
Description: (1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory.
CVSS Score: 3.6 (LOW)
CWE: CWE-94
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616673; http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-3355.html; http://www.openwall.com/lists/oss-security/2012/06/25/5
CVE: CVE-2012-3371
Published: 2012-07-17
Description: The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a request with many repeated IDs in the os:scheduler_hints section.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2012/07/11/13; http://www.securityfocus.com/bid/54388; http://www.ubuntu.com/usn/USN-1501-1
CVE: CVE-2012-4031
Published: 2012-07-17
Description: Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) langid cookie to port 85.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/83636; http://secunia.com/advisories/49776; http://www.exploit-db.com/exploits/19526
CVE: CVE-2012-4032
Published: 2012-07-17
Description: Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/83689; http://packetstormsecurity.org/files/114541/WebsitePanel-CMS-Open-Redirect.html; http://secunia.com/advisories/49813
CVE: CVE-2011-3562
Published: 2012-07-17
Description: Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/83952; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2011-4358
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect confidentiality and integrity, related to JSF.
CVSS Score: 6.4 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html; http://www.securitytracker.com/id?1027277
CVE: CVE-2012-0540
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/83976; http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://secunia.com/advisories/51309
CVE: CVE-2012-0563
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle Solaris 9, 10, and 11 allows local users to affect availability via unknown vectors related to Kerberos/klist.
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/83928; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1687
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle Solaris 10 and 11 allows local users to affect integrity and availability, related to Logical Domains (LDOM).
CVSS Score: 5.6 (MEDIUM)
References: http://osvdb.org/83938; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1689
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/83980; http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://secunia.com/advisories/51309
CVE: CVE-2012-1715
Published: 2012-07-17
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/83954; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1727
Published: 2012-07-17
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Document Repository.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/83956; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1728
Published: 2012-07-17
Description: Unspecified vulnerability in the Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Portal Framework.
CVSS Score: 5.8 (MEDIUM)
References: http://osvdb.org/83921; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1729
Published: 2012-07-17
Description: Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3 and earlier allows remote attackers to affect integrity via unknown vectors related to UI and Visualization.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/83953; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1730
Published: 2012-07-17
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Password Management.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/83955; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1731
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/83924; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1732
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1754.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/83919; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1733
Published: 2012-07-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality via unknown vectors related to CM.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/83968; http://secunia.com/advisories/49951; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1734
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/83979; http://rhn.redhat.com/errata/RHSA-2012-1462.html; http://secunia.com/advisories/51309
CVE: CVE-2012-1735
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/83975; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1736
Published: 2012-07-17
Description: Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1 allows remote attackers to affect confidentiality via unknown vectors related to Oracle Maps.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/83917; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1737
Published: 2012-07-17
Description: Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Enterprise Manager Grid Control EM Base Platform 10.2.0.5, EM Base Platform 11.1.0.1, EM Plugin for DB 12.1.0.1, and EM Plugin for DB 12.1.0.2, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Performance Advisories/UIs.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00018.html; http://osvdb.org/83945; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1738
Published: 2012-07-17
Description: Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote attackers to affect availability via unknown vectors related to Web Server.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/83974; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1739
Published: 2012-07-17
Description: Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Financials Business Intelligence.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/83957; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1740
Published: 2012-07-17
Description: Unspecified vulnerability in the Oracle Application Express Listener component in Oracle Application Express Listener 1.1-ea, 1.1.1, 1.1.2, and 1.1.3 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/83950; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1741
Published: 2012-07-17
Description: Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to User Administration Pages.
CVSS Score: 5.8 (MEDIUM)
References: http://osvdb.org/83951; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1742
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect availability via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1760.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/83922; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1743
Published: 2012-07-17
Description: Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0.x, 4.6.2, and 4.6.3 allows remote authenticated users to affect confidentiality, related to HTML Surround.
CVSS Score: 2.8 (LOW)
References: http://osvdb.org/83972; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1744
Published: 2012-07-17
Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent users to affect availability via unknown vectors related to Outside In Filters.
CVSS Score: 2.1 (LOW)
References: http://www-01.ibm.com/support/docview.wss?uid=swg21660640; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1745
Published: 2012-07-17
Description: Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to affect availability via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00018.html; http://osvdb.org/83946; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1746
Published: 2012-07-17
Description: Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Windows, allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2012-1747.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/83947; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1747
Published: 2012-07-17
Description: Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Windows, allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2012-1746.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/83948; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1748
Published: 2012-07-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Candidate Gateway, a different vulnerability than CVE-2012-0562.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/83966; http://secunia.com/advisories/49950; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1749
Published: 2012-07-17
Description: Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1 and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Oracle Maps.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/83915; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1750
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to mailx.
CVSS Score: 4.4 (MEDIUM)
References: http://osvdb.org/83933; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1752
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability, related to Kernel/NFS.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/83940; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1753
Published: 2012-07-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to PC.
CVSS Score: 5.4 (MEDIUM)
References: http://osvdb.org/83964; http://secunia.com/advisories/49951; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2012-1754
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1732.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/83920; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE: CVE-2012-1756
Published: 2012-07-17
Description: Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/83978; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150; http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html