deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-3519
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote authenticated users to affect integrity via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3520
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM - GP France component in Oracle PeopleSoft and JDEdwards Suite 8.81 SP1 Bundle #12, 8.9 GP Update 2010-E, 9.0 GP Update 2010-E, and 9.1 GP Update 2010-E allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3521
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM ePay component in Oracle PeopleSoft and JDEdwards Suite 9.0 to Payroll Update 10-C and 9.1 to Payroll Update 10-C allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2009-5007
Published: 2010-10-14
Description: The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://secunia.com/advisories/42093; http://www.infradead.org/openconnect.html; http://secunia.com/advisories/42093
CVE: CVE-2009-5008
Published: 2010-10-14
Description: Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://www.infradead.org/openconnect.html; http://www.infradead.org/openconnect.html
CVE: CVE-2009-5009
Published: 2010-10-14
Description: Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted DTLS Cipher option during a reconnect operation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.infradead.org/openconnect.html; http://www.infradead.org/openconnect.html
CVE: CVE-2010-3071
Published: 2010-10-14
Description: bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command.
CVSS Score: 5.0 (MEDIUM)
References: http://bip.t1r.net/; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=595409; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052992.html
CVE: CVE-2010-3076
Published: 2010-10-14
Description: The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the admin login page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/smbind-sql.txt; http://sourceforge.net/projects/smbind/files/smbind/0.4.8/smbind-0.4.8.tar.bz2/download; http://www.debian.org/security/2010/dsa-2103
CVE: CVE-2010-3192
Published: 2010-10-14
Description: Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated by a setuid program that contains a stack-based buffer overflow error, related to the __fortify_fail function in debug/fortify_fail.c, and the __stack_chk_fail (aka stack protection) and __chk_fail (aka FORTIFY_SOURCE) implementations.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2010/Apr/399; http://www.openwall.com/lists/oss-security/2010/08/25/8; http://www.openwall.com/lists/oss-security/2010/08/31/6
CVE: CVE-2010-3312
Published: 2010-10-14
Description: Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificate.
CVSS Score: 5.8 (MEDIUM)
References: http://blog.fefe.de/?ts=b26ca29d; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=564690; http://bugzilla-attachments.gnome.org/attachment.cgi?id=154330
CVE: CVE-2010-3900
Published: 2010-10-14
Description: Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312.
CVSS Score: 5.8 (MEDIUM)
References: http://git.xfce.org/apps/midori/tree/ChangeLog; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://secunia.com/advisories/43068
CVE: CVE-2010-3901
Published: 2010-10-14
Description: OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that (1) does not correspond to the server hostname or (2) is presented in circumstances involving a missing --cafile configuration option.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://www.infradead.org/openconnect.html; http://www.openwall.com/lists/oss-security/2010/08/01/1; http://www.openwall.com/lists/oss-security/2010/08/02/7
CVE: CVE-2010-3902
Published: 2010-10-14
Description: OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051620.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051637.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051640.html
CVE: CVE-2010-3903
Published: 2010-10-14
Description: Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service (application crash) via a 404 HTTP status code.
CVSS Score: 5.0 (MEDIUM)
References: http://www.infradead.org/openconnect.html; http://www.infradead.org/openconnect.html
CVE: CVE-2010-2601
Published: 2010-10-14
Description: Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted PDF document.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://blackberry.com/btsc/KB24547; http://blackberry.com/btsc/KB24547
CVE: CVE-2010-3522
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3523
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.28 and 8.50.12 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3524
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise SCM - Strategic Sourcing component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3525
Published: 2010-10-14
Description: Unspecified vulnerability in the (1) PeopleSoft Enterprise FMS, (2) SCM, (3) EPM, (4) CRM, and (5) Campus Solutions components in Oracle PeopleSoft and JDEdwards Suite 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3526
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise SCM - PO component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3527
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise FMS - AM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect integrity and availability via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3528
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise CRM - Common Components component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #41, 9.0 Bundle #28, and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3529
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise FMS - Cash Management component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3530
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM - HR component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #13 and 9.1 Bundle #3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3531
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise FMS ESA - RM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3532
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise CRM - Order Capture component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #28 and 9.1 Bundle #4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3533
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise SCM OM and CRM Order Capture component in Oracle PeopleSoft and JDEdwards Suite 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3534
Published: 2010-10-14
Description: Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 6.21.3.0 and 7.0.1.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Project Management Module.
CVSS Score: 4.6 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.securityfocus.com/bid/44019; http://www.us-cert.gov/cas/techalerts/TA10-287A.html
CVE: CVE-2010-3535
Published: 2010-10-14
Description: Unspecified vulnerability in the Directory Server Enterprise Edition component in Oracle Sun Products Suite 6.0, 6.1, 6.2, and 6.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Identity Synchronization for Windows.
CVSS Score: 4.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.securitytracker.com/id?1024572; http://www.us-cert.gov/cas/techalerts/TA10-287A.html
CVE: CVE-2010-3536
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3537
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise FMS - AM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3538
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise FMS - GL component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2010-3539.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3539
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft Enterprise FMS - GL component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2010-3538.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3540
Published: 2010-10-14
Description: Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to ZFS.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3542
Published: 2010-10-14
Description: Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality, related to USB.
CVSS Score: 1.9 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3544
Published: 2010-10-14
Description: Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and availability via unknown vectors related to Administration.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable source that this is cross-site request forgery (CSRF) that allows remote attackers to stop an instance via the management console.
CVSS Score: 5.8 (MEDIUM)
References: http://jvn.jp/en/jp/JVN50133036/index.html; http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000042.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3545
Published: 2010-10-14
Description: Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration.
CVSS Score: 5.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3546
Published: 2010-10-14
Description: Unspecified vulnerability in the Sun Java System Identity Manager component in Oracle Sun Products Suite 8.1 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.8 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3547
Published: 2010-10-14
Description: Unspecified vulnerability in the PeopleSoft FMS ESA - EX component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3564
Published: 2010-10-14
Description: Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM.  NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.
CVSS Score: 6.4 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748; http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html
CVE: CVE-2010-3575
Published: 2010-10-14
Description: Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 6.0, 6.2, 6.3, and 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Mail.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3576
Published: 2010-10-14
Description: Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect integrity and availability, related to the SCSI enclosure services device driver.
CVSS Score: 3.6 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3577
Published: 2010-10-14
Description: Unspecified vulnerability in Oracle OpenSolaris allows remote attackers to affect confidentiality and integrity, related to Kernel/CIFS.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3578
Published: 2010-10-14
Description: Unspecified vulnerability in Oracle OpenSolaris allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Depot Server.
CVSS Score: 9.0 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE: CVE-2010-3579
Published: 2010-10-14
Description: Unspecified vulnerability in the (1) Sun Convergence 1 and (2) Sun Java Communications Suite 7 components in Oracle Sun Products Suite 1.0 and 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail.
CVSS Score: 6.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html; http://www.us-cert.gov/cas/techalerts/TA10-287A.html; http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html