deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-0898
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0899
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0898, CVE-2010-0907, and CVE-2010-0906.
CVSS Score: 9.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0900
Published: 2010-07-13
Description: Unspecified vulnerability in the Network Layer component in Oracle Database Server 9.2.0.8, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1, when running on Windows, allows remote attackers to affect availability via unknown vectors.
CVSS Score: 2.6 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0901
Published: 2010-07-13
Description: Unspecified vulnerability in the Export component in Oracle Database Server 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Select Any Dictionary.
CVSS Score: 2.1 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0902
Published: 2010-07-13
Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0903
Published: 2010-07-13
Description: Unspecified vulnerability in the Net Foundation Layer component in Oracle Database Server 9.2.0.8, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1, when running on Windows, allows remote attackers to affect availability via unknown vectors.
CVSS Score: 7.8 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0904
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/8354; http://securityreason.com/securityalert/8356; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0905
Published: 2010-07-13
Description: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0906
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 9.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0907
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0898, CVE-2010-0899, CVE-2010-0904, and CVE-2010-0906.
CVSS Score: 10.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0908
Published: 2010-07-13
Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0909
Published: 2010-07-13
Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0910
Published: 2010-07-13
Description: Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 and 11.2.1.4.1 allows remote attackers to affect availability via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0911
Published: 2010-07-13
Description: Unspecified vulnerability in the Listener component in Oracle Database Server 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote attackers to affect availability via unknown vectors.
CVSS Score: 7.8 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0912
Published: 2010-07-13
Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0913
Published: 2010-07-13
Description: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0914
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect confidentiality via unknown vectors related to Mail, Calendar, Address Book, and Instant Messaging.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0915
Published: 2010-07-13
Description: Unspecified vulnerability in the Oracle Advanced Product Catalog component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0916
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle OpenSolaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to rdist.
CVSS Score: 6.2 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2370
Published: 2010-07-13
Description: Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 MP5, and 10.3 MP2 allows remote attackers to affect integrity, related to BPM.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2371
Published: 2010-07-13
Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1.1 allows local users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-2372.
CVSS Score: 1.9 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2372
Published: 2010-07-13
Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1.1 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2371.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2373
Published: 2010-07-13
Description: Unspecified vulnerability in the Console component in Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2374
Published: 2010-07-13
Description: Unspecified vulnerability in Solaris Studio 12 update 1 allows local users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 3.0 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2375
Published: 2010-07-13
Description: Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2376
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console.
CVSS Score: 3.2 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2377
Published: 2010-07-13
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.27 and 8.50.10 allows remote authenticated users to affect integrity via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2378
Published: 2010-07-13
Description: Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft and JDEdwards Suite CRM 9.0 Bundle #28 and CRM 9.1 Bundle #4 allows local users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 3.0 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2379
Published: 2010-07-13
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM - Time & Labor component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle #13 and HCM 9.1 Bundle #2 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2380
Published: 2010-07-13
Description: Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle #37, SCM 9.0 Bundle #30, and SCM 9.1 Bundle #4 allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2381
Published: 2010-07-13
Description: Unspecified vulnerability in the Application Server Control component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0081.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2382
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 3.2 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2383
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality and integrity, related to NFS.
CVSS Score: 3.2 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2384
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console.
CVSS Score: 3.2 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2385
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server.
CVSS Score: 5.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2386
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to GigaSwift Ethernet Driver.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2392
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect integrity and availability, related to ZFS.
CVSS Score: 5.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2393
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to RPC.
CVSS Score: 3.8 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2394
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to TCP/IP.
CVSS Score: 4.7 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2397
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and integrity, related to the GUI.
CVSS Score: 2.4 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2398
Published: 2010-07-13
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle #12 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2399
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to Kernel/VM.
CVSS Score: 4.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2400
Published: 2010-07-13
Description: Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to Kernel/Filesystem.
CVSS Score: 4.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2401
Published: 2010-07-13
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM - eProfile Mgr component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle #9 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2402
Published: 2010-07-13
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.27 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-2403
Published: 2010-07-13
Description: Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft and JDEdwards Suite Campus Solutions 9.0 Bundle #17 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 2.1 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-0266
Published: 2010-07-15
Description: Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka "Microsoft Outlook SMB Attachment Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-194A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-045; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11623
CVE: CVE-2010-0814
Published: 2010-07-15
Description: The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation, which allows remote attackers to execute arbitrary code via a web site that references multiple ActiveX controls, as demonstrated by the ImexGrid and FieldList controls, aka "Access ActiveX Control Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-194A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-044; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11907
CVE: CVE-2010-1881
Published: 2010-07-15
Description: The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML document that references this control along with crafted persistent storage data, aka "ACCWIZ.dll Uninitialized Variable Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-194A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-044; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11756
CVE: CVE-2010-1965
Published: 2010-07-15
Description: Unspecified vulnerability in HP Insight Orchestration for Windows before 6.1 allows remote attackers to read or modify data via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02280158; http://secunia.com/advisories/40549; http://securitytracker.com/id?1024183
CVE: CVE-2010-1966
Published: 2010-07-15
Description: Unspecified vulnerability in HP Insight Control power management for Windows before 6.1 allows local users to read or modify data, or cause a denial of service, via unknown vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282361; http://secunia.com/advisories/40550; http://securitytracker.com/id?1024184
CVE: CVE-2010-1967
Published: 2010-07-15
Description: Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data via unknown vectors.
CVSS Score: 3.6 (LOW)
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282377; http://secunia.com/advisories/40544; http://securitytracker.com/id?1024185
CVE: CVE-2010-1968
Published: 2010-07-15
Description: Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1971.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282377; http://secunia.com/advisories/40544; http://securitytracker.com/id?1024185
CVE: CVE-2010-1970
Published: 2010-07-15
Description: Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data, and consequently gain privileges, via unknown vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388; http://secunia.com/advisories/40553; http://securitytracker.com/id?1024186