deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-3506
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication.
CVSS Score: 4.3 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2012-1232.html; http://secunia.com/advisories/46527; http://secunia.com/advisories/46528
CVE: CVE-2011-3507
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows remote authenticated users to affect integrity via unknown vectors related to Messaging Server.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/76478; http://secunia.com/advisories/46526; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
CVE: CVE-2011-3508
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect confidentiality, integrity, and availability, related to LDAP library.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/76467; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50201
CVE: CVE-2011-3510
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.3.0 and 11.1.1.5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Platform Security.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/76487; http://secunia.com/advisories/46517; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
CVE: CVE-2011-3511
Published: 2011-10-18
Description: Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote authenticated users to affect integrity and availability via unknown vectors related to Privileged Account.
CVSS Score: 3.6 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/70789; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
CVE: CVE-2011-3512
Published: 2011-10-18
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/70790; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
CVE: CVE-2011-3513
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/46504; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50217
CVE: CVE-2011-3515
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Solaris 10 and 11 Express allows local users to affect integrity and availability via unknown vectors related to Process File System (procfs).
CVSS Score: 5.6 (MEDIUM)
References: http://osvdb.org/76468; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50235
CVE: CVE-2011-3517
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attackers to affect availability via unknown vectors related to Authentication.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/76459; http://rhn.redhat.com/errata/RHSA-2012-1232.html; http://secunia.com/advisories/46527
CVE: CVE-2011-3518
Published: 2011-10-18
Description: Unspecified vulnerability in the Siebel Core - UIF Client component in Oracle Siebel CRM 8.0.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to User Interface.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50256; https://exchange.xforce.ibmcloud.com/vulnerabilities/70794
CVE: CVE-2011-3519
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/46504; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50233
CVE: CVE-2011-3520
Published: 2011-10-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect integrity via unknown vectors related to Personalization.
CVSS Score: 2.8 (LOW)
References: http://osvdb.org/76522; http://secunia.com/advisories/46515; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
CVE: CVE-2011-3522
Published: 2011-10-18
Description: Unspecified vulnerability in SysFW 8.0 on certain SPARC T3, Netra SPARC T3, Sun Fire, and Sun Blade based servers allows local users to affect confidentiality, related to Integrated Lights Out Manager CLI.
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/76477; http://secunia.com/advisories/46509; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
CVE: CVE-2011-3523
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-2237.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/76490; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50209
CVE: CVE-2011-3525
Published: 2011-10-18
Description: Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user.
CVSS Score: 6.5 (MEDIUM)
References: http://osvdb.org/76516; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50197
CVE: CVE-2011-3526
Published: 2011-10-18
Description: Unspecified vulnerability in the Siebel Core - UIF Server component in Oracle Siebel CRM 8.0.0 and 8.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to User Interface.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50230; https://exchange.xforce.ibmcloud.com/vulnerabilities/70800
CVE: CVE-2011-3527
Published: 2011-10-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Candidate Gateway.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/46505; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50241
CVE: CVE-2011-3528
Published: 2011-10-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to eProfile.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/46505; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50253
CVE: CVE-2011-3529
Published: 2011-10-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Talent Acquisition Manager.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/46505; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50267
CVE: CVE-2011-3530
Published: 2011-10-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect confidentiality via unknown vectors related to eDevelopment.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/46505; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50238
CVE: CVE-2011-3532
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0.2, 6.0.0.3, and 6.0.0.4 allows remote attackers to affect confidentiality via unknown vectors related to Supplier Portal.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50227; http://www.securitytracker.com/id?1026205
CVE: CVE-2011-3533
Published: 2011-10-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect confidentiality and integrity, related to Job Profile Manager (JPM).
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/46505; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50249
CVE: CVE-2011-3534
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Network Status Monitor (statd).
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/76469; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50251
CVE: CVE-2011-3535
Published: 2011-10-18
Description: Unspecified vulnerability in the Solaris component in Oracle Sun Products Suite 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Remote Quota Server (rquotad).
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/76470; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50255
CVE: CVE-2011-3536
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to DTrace Software Library (libdtrace).
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/76471; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50262
CVE: CVE-2011-3537
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel/Filesystem.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/76472; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50259
CVE: CVE-2011-3538
Published: 2011-10-18
Description: Unspecified vulnerability in the Sun Ray component in Oracle Virtualization 4.0 allows remote attackers to affect integrity, related to Authentication.  NOTE: this identifier was inadvertently used for an Oracle Industry Applications issue involving TMS Help, but that issue has been assigned CVE-2011-2323.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/46511; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50245
CVE: CVE-2011-3539
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to Zones.
CVSS Score: 1.7 (LOW)
References: http://osvdb.org/76473; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50270
CVE: CVE-2011-3541
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows local users to affect availability via unknown vectors related to Outside In Filters.
CVSS Score: 1.9 (LOW)
References: http://secunia.com/advisories/46518; http://www-01.ibm.com/support/docview.wss?uid=swg21660640; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
CVE: CVE-2011-3542
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to Kernel/Performance Counter BackEnd Module (pcbe).
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/76474; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50244
CVE: CVE-2011-3543
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to iSCSI DataMover (IDM).
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/76475; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50214
CVE: CVE-2011-3559
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect availability via unknown vectors related to Web Container.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/76476; http://secunia.com/advisories/46523; http://secunia.com/advisories/46524
CVE: CVE-2011-2323
Published: 2011-10-18
Description: Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/46513; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://secunia.com/advisories/46513
CVE: CVE-2011-4136
Published: 2011-10-19
Description: django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering use of a key that is equal to that session's identifier.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2011/09/11/1; http://openwall.com/lists/oss-security/2011/09/13/2; http://secunia.com/advisories/46614
CVE: CVE-2011-4137
Published: 2011-10-19
Description: The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service (resource consumption) via a URL associated with (1) a slow response, (2) a completed TCP connection with no application data sent, or (3) a large amount of application data, a related issue to CVE-2011-1521.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://openwall.com/lists/oss-security/2011/09/11/1; http://openwall.com/lists/oss-security/2011/09/13/2; http://openwall.com/lists/oss-security/2011/09/15/5
CVE: CVE-2011-4138
Published: 2011-10-19
Description: The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for the new target URL in the case of a redirect, which might allow remote attackers to trigger arbitrary GET requests with an unintended source IP address via a crafted Location header.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2011/09/11/1; http://openwall.com/lists/oss-security/2011/09/13/2; http://secunia.com/advisories/46614
CVE: CVE-2011-4139
Published: 2011-10-19
Description: Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2011/09/11/1; http://openwall.com/lists/oss-security/2011/09/13/2; http://secunia.com/advisories/46614
CVE: CVE-2011-4140
Published: 2011-10-19
Description: The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page containing JavaScript code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://openwall.com/lists/oss-security/2011/09/11/1; http://openwall.com/lists/oss-security/2011/09/13/2; http://secunia.com/advisories/46614
CVE: CVE-2011-3156
Published: 2011-10-19
Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1222.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1026195; https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866; http://securitytracker.com/id?1026195
CVE: CVE-2011-3157
Published: 2011-10-19
Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1225.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1026195; https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866; http://securitytracker.com/id?1026195
CVE: CVE-2011-3158
Published: 2011-10-19
Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1226.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1026195; https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866; http://securitytracker.com/id?1026195
CVE: CVE-2011-3159
Published: 2011-10-19
Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1227.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1026195; https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866; http://securitytracker.com/id?1026195
CVE: CVE-2011-3160
Published: 2011-10-19
Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1228.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1026195; https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866; http://securitytracker.com/id?1026195
CVE: CVE-2011-3161
Published: 2011-10-19
Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1229.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1026195; https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866; http://securitytracker.com/id?1026195
CVE: CVE-2011-3162
Published: 2011-10-19
Description: Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1026195; https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c03058866; http://securitytracker.com/id?1026195
CVE: CVE-2011-3294
Published: 2011-10-19
Description: Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, aka Bug ID CSCts80342.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securitytracker.com/id?1026186; http://www.cisco.com/en/US/products/products_security_response09186a0080b98d0b.html; http://www.securityfocus.com/bid/50084
CVE: CVE-2011-3516
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS Score: 7.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2
CVE: CVE-2011-3521
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2558&w=2
CVE: CVE-2011-3544
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2
CVE: CVE-2011-3545
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2
CVE: CVE-2011-3546
Published: 2011-10-19
Description: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to Deployment.
CVSS Score: 5.8 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1589&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2253&w=2