deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-3161
Published: 2008-07-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo 4.1 and 5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Accept, (2) Accept-Language, (3) UA-CPU, (4) Accept-Encoding, (5) User-Agent, or (6) Cookie HTTP header.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/30180; https://exchange.xforce.ibmcloud.com/vulnerabilities/43730; http://www.securityfocus.com/bid/30180
CVE: CVE-2008-3162
Published: 2008-07-14
Description: Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted STR file that interleaves audio and video sectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=489965; http://secunia.com/advisories/30994; http://secunia.com/advisories/31268
CVE: CVE-2008-3163
Published: 2008-07-14
Description: Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dodosmail_header_file parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/30112; https://exchange.xforce.ibmcloud.com/vulnerabilities/43625; http://www.securityfocus.com/bid/30112
CVE: CVE-2008-3164
Published: 2008-07-14
Description: Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter.  NOTE: it was later reported that 3.01a is also affected.
CVSS Score: 7.6 (HIGH)
CWE: CWE-22
References: http://downloads.securityfocus.com/vulnerabilities/exploits/30121.pl; http://secunia.com/advisories/30930; http://www.securityfocus.com/bid/30121
CVE: CVE-2008-3165
Published: 2008-07-14
Description: Directory traversal vulnerability in rss.php in fuzzylime (cms) 3.01a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/30930; http://securityreason.com/securityalert/3995; http://www.securityfocus.com/bid/30103
CVE: CVE-2008-3166
Published: 2008-07-14
Description: PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/30999; http://securityreason.com/securityalert/3994; http://www.vupen.com/english/advisories/2008/2033/references
CVE: CVE-2008-3167
Published: 2008-07-14
Description: Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) dir[plugins] parameter to (a) HTMLSax3.php and (b) safehtml.php in plugins/safehtml/ and the (2) sIncPath parameter to (c) ray/modules/global/inc/content.inc.php. NOTE: vector 1 might be a problem in SafeHTML instead of Dolphin.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/30981; http://secunia.com/advisories/30995; http://securityreason.com/securityalert/3993
CVE: CVE-2008-3168
Published: 2008-07-14
Description: The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745; http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111; http://www.securityfocus.com/bid/30152
CVE: CVE-2008-3169
Published: 2008-07-14
Description: Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to a "coordinate normalization bug." NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745; http://secunia.com/advisories/30954; http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111
CVE: CVE-2008-3170
Published: 2008-07-14
Description: Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking," a related issue to CVE-2004-0746, CVE-2004-0866, and CVE-2004-0867.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html; http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html; http://secunia.com/advisories/31128
CVE: CVE-2008-3171
Published: 2008-07-14
Description: Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html; http://www.securityfocus.com/bid/30193; https://exchange.xforce.ibmcloud.com/vulnerabilities/43837
CVE: CVE-2008-3172
Published: 2008-07-14
Description: Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://crisp.tweakblogs.net/blog/ie-and-2-letter-domain-names.html; http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html; http://o.bulport.com/index.php?item=55
CVE: CVE-2008-3173
Published: 2008-07-14
Description: Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one dot character, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking." NOTE: this issue may exist because of an insufficient fix for CVE-2004-0866.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://crisp.tweakblogs.net/blog/ie-and-2-letter-domain-names.html; http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/43950
CVE: CVE-2008-3177
Published: 2008-07-15
Description: Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://secunia.com/advisories/31037; http://www.securityfocus.com/bid/30110; http://www.securitytracker.com/id?1020462
CVE: CVE-2008-3178
Published: 2008-07-15
Description: Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execute arbitrary code by uploading a .php file with a jpeg content type, then accessing it via a direct request to the file in upload/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/30948; http://securityreason.com/securityalert/3991; http://www.securityfocus.com/bid/30117
CVE: CVE-2008-3179
Published: 2008-07-15
Description: Directory traversal vulnerability in website.php in Web 2 Business (W2B) phpDatingClub (aka Dating Club) 3.7 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/31040; http://securityreason.com/securityalert/3992; http://www.securityfocus.com/bid/30176
CVE: CVE-2008-3180
Published: 2008-07-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in ContentNow CMS 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) pageid parameter or (2) PATH_INFO.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/30888; http://securityreason.com/securityalert/3990; http://www.securityfocus.com/bid/30102
CVE: CVE-2008-3181
Published: 2008-07-15
Description: Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/30888; http://www.securityfocus.com/bid/30102; https://exchange.xforce.ibmcloud.com/vulnerabilities/43609
CVE: CVE-2008-3182
Published: 2008-07-15
Description: Stack-based buffer overflow in DAP.exe in Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, and other 8.x versions allows user-assisted remote attackers to execute arbitrary code via an M3U (.m3u) file containing a long MP3 URL.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/30997; http://securityreason.com/securityalert/3997; http://www.securityfocus.com/bid/30138
CVE: CVE-2008-3183
Published: 2008-07-15
Description: PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirDepth parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://securityreason.com/securityalert/3998; http://www.securityfocus.com/archive/1/494138/100/0/threaded; http://www.securityfocus.com/bid/30173
CVE: CVE-2008-3184
Published: 2008-07-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x versions, allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO (PHP_SELF) or (2) the do parameter, as demonstrated by requests to upload/admincp/faq.php.  NOTE: this issue can be leveraged to execute arbitrary PHP code.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/30991; http://securityreason.com/securityalert/4000; http://www.securityfocus.com/archive/1/494049/100/0/threaded
CVE: CVE-2008-3185
Published: 2008-07-15
Description: SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listing_id parameter in a listings action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://e-rdc.org/v1/news.php?readmore=101; http://securityreason.com/securityalert/4002; http://www.securityfocus.com/archive/1/493663/100/0/threaded
CVE: CVE-2008-3186
Published: 2008-07-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrary web script or HTML via the membername parameter to (1) members.php, (2) comments.php, (3) photos.php, (4) archive.php, or (5) cat.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/29883; https://exchange.xforce.ibmcloud.com/vulnerabilities/43319; http://www.securityfocus.com/bid/29883
CVE: CVE-2008-2576
Published: 2008-07-15
Description: Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2, 9.1, 9.0, and 8.1 SP6 has unknown impact and local attack vectors.
CVSS Score: 4.4 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2577
Published: 2008-07-15
Description: Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2 MP1 has unknown impact and remote authenticated attack vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2578
Published: 2008-07-15
Description: Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 and 9.2 MP1 has unknown impact and local attack vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2579
Published: 2008-07-15
Description: Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 has unknown impact and remote attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://jvn.jp/en/jp/JVN81667751/index.html; http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000040.html
CVE: CVE-2008-2580
Published: 2008-07-15
Description: Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 has unknown impact and remote attack vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2581
Published: 2008-07-15
Description: Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer.
CVSS Score: 5.1 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2582
Published: 2008-07-15
Description: Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2583
Published: 2008-07-15
Description: Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before 20080715, has unknown impact and remote attack vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2585
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2586
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2606.
CVSS Score: 4.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2587
Published: 2008-07-15
Description: Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors.
CVSS Score: 1.5 (LOW)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2589
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability in the WWV_RENDER_REPORT package that allows remote attackers to execute arbitrary SQL (PL/SQL) commands via the second argument to the SHOW procedure.
CVSS Score: 6.4 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2590
Published: 2008-07-15
Description: Unspecified vulnerability in the Instance Management component in Oracle Database 10.1.0.5 and Enterprise Manager 10.1.0.6 has unknown impact and remote authenticated attack vectors.
CVSS Score: 3.5 (LOW)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2591
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2592
Published: 2008-07-15
Description: Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_DEFER_SYS. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is a SQL injection vulnerability in the DELETE_TRAN procedure.
CVSS Score: 5.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2593
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2594.
CVSS Score: 4.3 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2594
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2593.
CVSS Score: 6.4 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2595
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors.  NOTE: the previous information was obtained from the Oracle July 2008 CPU.  Oracle has not commented on reliable researcher claims that this issue is a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=725; http://secunia.com/advisories/31087
CVE: CVE-2008-2596
Published: 2008-07-15
Description: Unspecified vulnerability in the Mobile Application Server component in Oracle E-Business Suite 12.0.3 has unknown impact and remote authenticated attack vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2597
Published: 2008-07-15
Description: Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2598 and CVE-2008-2599.
CVSS Score: 7.5 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2598
Published: 2008-07-15
Description: Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2597 and CVE-2008-2599.
CVSS Score: 7.5 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2599
Published: 2008-07-15
Description: Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2597 and CVE-2008-2598.
CVSS Score: 7.5 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2600
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to MDSYS.SDO_TOPO_MAP.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2601
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2602
Published: 2008-07-15
Description: Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to the IMP_FULL_DATABASE role.
CVSS Score: 4.6 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113