deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-3414
Published: 2005-11-01
Description: eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17105; http://www.osvdb.org/20411; http://www.securityfocus.com/bid/15256
CVE: CVE-2005-3415
Published: 2005-11-01
Description: phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GET/POST/COOKIE (GPC) variable and a GLOBALS[] variable with the same name, which causes phpBB to unset the GLOBALS[] variable but not the GPC variable.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7600&w=2; http://secunia.com/advisories/17366; http://secunia.com/advisories/18098
CVE: CVE-2005-3416
Published: 2005-11-01
Description: phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not been called to handle a session, allows remote attackers to bypass security checks by setting the $_SESSION and $HTTP_SESSION_VARS variables to strings instead of arrays, which causes an array_merge function call to fail.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7600&w=2; http://secunia.com/advisories/17366; http://secunia.com/advisories/18098
CVE: CVE-2005-3417
Published: 2005-11-01
Description: phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP_* variables.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7600&w=2; http://secunia.com/advisories/17366; http://secunia.com/advisories/18098
CVE: CVE-2005-3418
Published: 2005-11-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to usercp_register.php, (2) forward_page parameter to login.php, and (3) list_cat parameter to search.php, which are not initialized as variables.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7600&w=2; http://secunia.com/advisories/17366; http://secunia.com/advisories/18098
CVE: CVE-2005-3419
Published: 2005-11-01
Description: SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signature_bbcode_uid parameter, which is not properly initialized.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7600&w=2; http://secunia.com/advisories/17366; http://secunia.com/advisories/18098
CVE: CVE-2005-3420
Published: 2005-11-01
Description: usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and execute PHP code via the signature_bbcode_uid parameter, as demonstrated by injecting an "e" modifier into a preg_replace statement.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7600&w=2; http://secunia.com/advisories/17366; http://secunia.com/advisories/18098
CVE: CVE-2005-3421
Published: 2005-11-01
Description: estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters.
CVSS Score: 5.0 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/17379; http://securitytracker.com/id?1015119
CVE: CVE-2005-3422
Published: 2005-11-01
Description: Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17387; http://www.osvdb.org/20398; http://www.securityfocus.com/bid/15233
CVE: CVE-2005-3423
Published: 2005-11-01
Description: Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php.
CVSS Score: 7.5 (HIGH)
References: http://rst.void.ru/papers/advisory35.txt; http://secunia.com/advisories/17378; http://www.osvdb.org/20378
CVE: CVE-2005-3424
Published: 2005-11-01
Description: Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a different vulnerability than CVE-2005-3425.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html; http://secunia.com/advisories/17351; http://www.debian.org/security/2005/dsa-877
CVE: CVE-2005-3425
Published: 2005-11-01
Description: Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2005-3424.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17351; http://secunia.com/advisories/17355; http://secunia.com/advisories/17449
CVE: CVE-2005-3409
Published: 2005-11-02
Description: OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.
CVSS Score: 5.0 (MEDIUM)
References: http://openvpn.net/changelog.html; http://secunia.com/advisories/17376; http://secunia.com/advisories/17447
CVE: CVE-2005-3426
Published: 2005-11-02
Description: Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote attackers to cause a denial of service (memory corruption and device reload) via a malformed client certificate during SSL session negotiation.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17260; http://securityreason.com/securityalert/99; http://securitytracker.com/id?1015081
CVE: CVE-2005-3427
Published: 2005-11-02
Description: The Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/17397; http://securityreason.com/securityalert/137; http://securitytracker.com/id?1015133
CVE: CVE-2005-3428
Published: 2005-11-02
Description: Cross-site scripting (XSS) vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to inject arbitrary web script or HTML via a message body.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1151&w=2; http://secunia.com/advisories/17240/
CVE: CVE-2005-3429
Published: 2005-11-02
Description: Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local users to obtain passwords by reading the cookie file, or remote attackers to obtain the cookies via cross-site scripting (XSS) vulnerabilities.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1151&w=2; http://securitytracker.com/id?1015117
CVE: CVE-2005-3430
Published: 2005-11-02
Description: Incomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions, such as (1) .unk, (2) .asa, and possibly (3) .htr and (4) .aspx, which are not filtered like the .asp extension.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1151&w=2; http://secunia.com/advisories/17240/
CVE: CVE-2005-3431
Published: 2005-11-02
Description: Absolute path traversal vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to read arbitrary files via a full pathname in the AttachPath field of a mail message under composition.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1151&w=2; http://secunia.com/advisories/17240/
CVE: CVE-2005-3432
Published: 2005-11-02
Description: MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to * (wildcard) and the page parameter set to all.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7210&w=2; http://secunia.com/advisories/17374/; http://securityreason.com/securityalert/128
CVE: CVE-2005-3433
Published: 2005-11-02
Description: Buffer overflow in Mirabilis ICQ 2003a allows user-assisted attackers to execute arbitrary code by convincing a user to enter long strings into the First Name and Last Name fields.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9149&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9149&w=2
CVE: CVE-2005-3434
Published: 2005-11-02
Description: Archilles Newsworld before 1.5.0-rc1 stores (1) account.nwd and (2) session.nwd under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames, hashed passwords, and session IDs, and gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0709&w=2; http://secunia.com/advisories/17310/; https://exchange.xforce.ibmcloud.com/vulnerabilities/22859
CVE: CVE-2005-3435
Published: 2005-11-02
Description: admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and specifying the hash in the pwd argument.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0709&w=2; http://secunia.com/advisories/17310/; https://exchange.xforce.ibmcloud.com/vulnerabilities/22860
CVE: CVE-2005-3436
Published: 2005-11-02
Description: Cross-site scripting (XSS) vulnerability in Nuked-Klan 1.7 allows remote attackers to inject arbitrary web script or HTML via the (1) Search module, (2) certain edit fields in Guestbook, (3) the title in the Forum module, and (4) Textbox.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0577&w=2; http://secunia.com/advisories/17304/; http://securityreason.com/securityalert/104
CVE: CVE-2005-3437
Published: 2005-11-02
Description: Unspecified vulnerability in the PL/SQL component in Oracle Database Server 9i up to 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# DB01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3438
Published: 2005-11-02
Description: Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 in Change Data Capture; (2) DB06 in Data Guard Logical Standby; (3) DB10 in Locale; (4) DB12 in Materialized Views; (5) DB13 in Objects Extension; (6) DB15 in Oracle Label Security; (7) DB27 in Security, possibly due to a buffer overflow in sys.pbsde.init; and (8) DB28 and (9) DB29 in Workspace Manager.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038061.html; http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524
CVE: CVE-2005-3439
Published: 2005-11-02
Description: Multiple unspecified vulnerabilities in Oracle Database Server 10g up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB02, (2) DB03, and (3) DB05 in Change Data Capture; (4) DB07 in Data Pump Export; and (5) DB18, (6) DB19, (7) DB20, (8) DB21, (9) DB22, (10) DB23, (11) DB24, and (12) DB25 in the Spatial component.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3440
Published: 2005-11-02
Description: Unspecified vulnerability in Database Scheduler in Oracle Database Server 10g up to 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# DB08.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3441
Published: 2005-11-02
Description: Unspecified vulnerability in Intelligent Agent in Oracle Database Server 9i up to 9.0.1.5 has unknown impact and attack vectors, aka Oracle Vuln# DB14.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3442
Published: 2005-11-02
Description: Multiple unspecified vulnerabilities in Oracle Database Server 8i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB09 in Export, (2) DB11 in Materialized Views, and (3) DB16 in Security Service.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3443
Published: 2005-11-02
Description: Unspecified vulnerability in the Spatial component in Oracle Database Server from 9i up to 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# DB17.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3444
Published: 2005-11-02
Description: Multiple unspecified vulnerabilities in the Programmatic Interface in Oracle Database Server from 8i up to 9.2.0.5 have unknown impact and attack vectors, aka Oracle Vuln# DB26.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3445
Published: 2005-11-02
Description: Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB30 and AS03 or (2) DB31 and AS05.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.kb.cert.org/vuls/id/890940
CVE: CVE-2005-3446
Published: 2005-11-02
Description: Unspecified vulnerability in Internet Directory in Oracle Database Server 9i up to 9.2.0.6 and Application Server 9.0.2.3 up to 10.1.2.0 has unknown impact and attack vectors, aka Oracle Vuln# DB32 and AS06.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3447
Published: 2005-11-02
Description: Unspecified vulnerability in Single Sign-On in Oracle Database Server 10g up to 10.1.0.4.2 and Application Server 9.0.2.3 up to 9.0.4.2 has unknown impact and attack vectors, aka Oracle Vuln# DB33 and AS08.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3448
Published: 2005-11-02
Description: Unspecified vulnerability in the OC4J Module in Oracle Application Server 9.0 up to 10.1.2.0.2 has unknown impact and attack vectors, as identified by Oracle Vuln# AS01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3449
Published: 2005-11-02
Description: Multiple unspecified vulnerabilities in Oracle Application Server 9.0 up to 10.1.2.0 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) AS02 in Containers for J2EE, (2) AS07 in Internet Directory, (3) AS09 in Report Server, and (4) AS11 in Web Cache.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.kb.cert.org/vuls/id/376756
CVE: CVE-2005-3450
Published: 2005-11-02
Description: Unspecified vulnerability in the HTTP Server in Oracle Application Server 1.0 up to 9.0.2.3 has unknown impact and attack vectors, as identified by Oracle Vuln# AS04.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3451
Published: 2005-11-02
Description: Unspecified vulnerability in SQL*ReportWriter in Oracle Application Server 9.0 up to 9.0.2.1 has unknown impact and attack vectors, as identified by Oracle Vuln# AS10.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/171364; http://www.kb.cert.org/vuls/id/210524
CVE: CVE-2005-3452
Published: 2005-11-02
Description: Unspecified vulnerability in Web Cache in Oracle Application Server 1.0 up to 9.0.4.2 has unknown impact and attack vectors, as identified by Oracle Vuln# AS13.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3453
Published: 2005-11-02
Description: Multiple unspecified vulnerabilities in Web Cache in Oracle Application Server 1.0 up to 10.1.2.0 has unknown impact and attack vectors, as identified by Oracle Vuln# (1) AS12 and (2) AS14.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3454
Published: 2005-11-02
Description: Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10g Release 1 version 10.1.1 and 9i Release 2 9.0.4.2 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) OCS01, (2) OCS02, (3) OCS03, and (4) OCS04 for Calendar; (5) OCS05, (6) OCS06, (7) OCS07, (8) OCS08, (9) OCS09, and (10) OCS10 for Email Server; and (11) OCS11, (12) OCS12, and (13) OCS13 for Oracle Files.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3455
Published: 2005-11-02
Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.10 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) APPS01 in Application Install; (2) APPS02 and (3) APPS03 in Application Object Library; (4) APPS05 and (5) APPS06 in Applications Technology Stack; (6) APPS07 in Applications Utilities; (7) APPS09, (8) APPS10, and (9) APPS11 in HRMS; (10) APPS12 in Mobile Application Foundation; (11) APPS13 in SDP Number Portability; (12) APPS14 in Oracle Service; (13) APPS15 in Service Fulfillment Manage, (14) APPS16 in Universal Work Queue; and (15) APPS20 in Workflow Cartridge.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/150508; http://www.kb.cert.org/vuls/id/210524
CVE: CVE-2005-3456
Published: 2005-11-02
Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.9 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) APPS04 in Application Object Library, and (2) APPS17, (3) APPS18, and (4) APPS21 in Workflow Cartridge.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3457
Published: 2005-11-02
Description: Unspecified vulnerability in Oracle E-Business Suite and Applications 11.0 up to 11.5.10 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS08 in HRMS.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3458
Published: 2005-11-02
Description: Unspecified vulnerability in Oracle E-Business Suite and Applications 11.0 up to 11.5.9 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS19 in Workflow Cartridge.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3459
Published: 2005-11-02
Description: Unspecified vulnerability in Oracle E-Business Suite and Applications 4.5 up to 4.5.1 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS22 in Oracle Clinical.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3460
Published: 2005-11-02
Description: Unspecified vulnerability in Oracle Agent in Oracle Enterprise Manager 9.0.4.1 up to 10.1.0.4 has unknown impact and attack vectors, as identified by Oracle Vuln# EM01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.kb.cert.org/vuls/id/865948
CVE: CVE-2005-3461
Published: 2005-11-02
Description: Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.42 up to 8.45.17 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3462
Published: 2005-11-02
Description: Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.02 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE02.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3463
Published: 2005-11-02
Description: Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.03 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE03.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3464
Published: 2005-11-02
Description: Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE04.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE: CVE-2005-3465
Published: 2005-11-02
Description: Unspecified vulnerability in JDEdwards HTML Server in Oracle EnterpriseOne 8.94 OneWorld XE up to 8.95_B1, 8.94_Q1, and SP23_K1 has unknown impact and attack vectors, as identified by Oracle Vuln# JDE01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17250; http://www.kb.cert.org/vuls/id/210524; http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html