deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-5322
Published: 2006-10-17
Description: Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://tincan.co.uk/?lid=1821; http://www.phplist.com/news; https://exchange.xforce.ibmcloud.com/vulnerabilities/29637
CVE: CVE-2006-5323
Published: 2006-10-17
Description: Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors, related to a "possible security exposure," aka PK29360.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22372; http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013142; http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951
CVE: CVE-2006-5324
Published: 2006-10-17
Description: The Web Services Notification (WSN) security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22372; http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013142; http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951
CVE: CVE-2006-5325
Published: 2006-10-17
Description: Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) mkb.php, (2) iplogger.php, (3) admin_board2.php, or (4) admin_logger.php in includes/, different vectors than CVE-2006-5224.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1736; http://www.securityfocus.com/archive/1/448447/100/0/threaded; http://securityreason.com/securityalert/1736
CVE: CVE-2006-5326
Published: 2006-10-17
Description: PHP remote file inclusion vulnerability in language/lang/lang_contact_faq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22430; http://www.vupen.com/english/advisories/2006/4040; http://secunia.com/advisories/22430
CVE: CVE-2006-4819
Published: 2006-10-17
Description: Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address).
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=424; http://secunia.com/advisories/22218; http://secunia.com/advisories/22509
CVE: CVE-2006-5327
Published: 2006-10-17
Description: Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html; http://secunia.com/advisories/22390; http://secunia.com/advisories/22474
CVE: CVE-2006-5328
Published: 2006-10-17
Description: OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html; http://secunia.com/advisories/22390; http://secunia.com/advisories/27441
CVE: CVE-2006-5330
Published: 2006-10-17
Description: CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions (1) XML.addRequestHeader and (2) XML.contentType.  NOTE: the flexibility of the attack varies depending on the type of web browser being used.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-79
References: http://docs.info.apple.com/article.html?artnum=305214; http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html; http://lists.suse.com/archive/suse-security-announce/2006-Dec/0006.html
CVE: CVE-2006-5173
Published: 2006-10-17
Description: Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Check flag (EFLAGS 0x40000), which triggers a SIGBUS in other processes that have an unaligned access.
CVSS Score: 2.1 (LOW)
References: http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=47a5c6fa0e204a2b63309c648bb2fde36836c826; http://secunia.com/advisories/23361; http://secunia.com/advisories/23384
CVE: CVE-2006-5332
Published: 2006-10-18
Description: Unspecified vulnerability in xdb.dbms_xdbz in the XMLDB component for Oracle Database 9.2.0.6 and 10.1.0.4 has unknown impact and remote authenticated attack vectors, aka Vuln# DB01.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB01 is for PL/SQL injection in the ENABLE_HIERARCHY_INTERNAL procedure.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5333
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Spatial component in Oracle Database 10.2.0.2 has unknown impact and remote authenticated attack vectors related to "create session" privileges, aka Vuln# DB02.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB02 is for SQL injection in the SDO_DROP_USER_BEFORE package using a Trigger for a DROP USER statement in an anonymous PL/SQL block.
CVSS Score: 7.1 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5334
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and remote authenticated attack vectors related to mdsys.md2, aka Vuln# DB03. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB03 is related to one or more of (1) a buffer overflow in the (a) RELATE function or (2) SQL injection in the (b) TESSELATE_FIXED and (c) TESSELATE function.
CVSS Score: 7.1 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5335
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors related to (1) Vuln# DB04 and sys.dbms_cdc_impdp in the (a) Change Data Capture (CDC) component; (2) Vuln# DB07, (3) DB08, and (4) DB16 in sys.dbms_cdc_isubscribe in CDC; and (5) mdsys.sdo_geor_int in the (b) Oracle Spatial component, aka DB12.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that these issues are related to SQL injection in the BUMP_SEQUENCE function (DB04), CREATE_SUBSCRIPTION (DB07), EXTEND_WINDOW_LIST (DB08), SUBSCRIBE (DB16), and COMPRESSDATA (DB12).
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5336
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and have unknown impact and remote authenticated attack vectors related to (1) sys.dbms_cdc_ipublish (Vuln# DB05) and (2) sys.dbms_cdc_isubscribe (DB06).  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB05 is for SQL injection in CREATE_CHANGE_TABLE and CHANGE_TABLE_TRIGGER, and DB06 is for PL/SQL injection in the PREPARE_UNBOUNDED_VIEW procedure.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5337
Published: 2006-10-18
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 has unknown impact and remote authenticated attack vectors, aka Vuln# DB09.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5338
Published: 2006-10-18
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5 has unknown impact and remote authenticated attack vectors related to sys.dbms_sqltune, aka Vuln# DB10.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB10 is for SQL injection in DROP_SQLSET, DELETE_SQLSET, SELECT_SQLSET, and I_SET_TUNING_PARAMETER.  NOTE: some of these vectors might be in DBMS_SQLTUNE_INTERNAL.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5339
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB11.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB11 is related to "length checking" in the RELATE function before MD2.RELATE is called.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5340
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated attack vectors related to (1) mdsys.sdo_lrs, aka Vuln# DB13, and (2) Vuln# DB17.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB13 is related to bypassing input validation for SQL injection related to convert_to_lrs_layer and dbms_assert, and DB17 is related to SQL injection in the trigger in the SDO_DROP_USER package.
CVSS Score: 7.1 (HIGH)
References: http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00489.html; http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00500.html; http://secunia.com/advisories/22396
CVE: CVE-2006-5341
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in XMLDB component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated attack vectors, aka (1) Vuln# DB14 and (2) DB15 related to xdb.dbms_xdbz.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB14 is for SQL injection in the PITRIG_DROP and PITRIG_DROPMETADATA functions in XDB_PITRIG_PKG, and DB15 is for SQL injection in DISABLE_HIERARCHY_INTERNAL in DBMS_XDBZ.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5342
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.3 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_tune, aka Vuln# DB18.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB18 might be related to SQL injection in the EXTENT_OF function.
CVSS Score: 7.1 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5343
Published: 2006-10-18
Description: Unspecified vulnerability in Database Scheduler component in Oracle Database 10.1.0.3 has unknown impact and remote authenticated attack vectors related to sys.dbms_scheduler, aka Vuln# DB19.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5344
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 have unknown impact and remote authenticated attack vectors related to (1) mdsys.sdo_3gl, aka Vuln# DB20, and (2) mdsys.sdo_cs, aka DB21.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB20 is a buffer overflow in GEOM_OPERATION, and DB21 is related to a buffer overflow and SQL injection in TRANSFORM_LAYER.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5345
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB22.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB22 is related to "length checking" in the RELATE function before MD2.RELATE is called.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
CVE: CVE-2006-5346
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, as used in Oracle Collaboration Suite 9.0.4.2 and Oracle E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors related to htdigest, aka Vuln# OHS02.
CVSS Score: 7.6 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5347
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle Collaboration Suite 9.0.4.2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS04.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5348
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, Oracle Collaboration Suite 9.0.4.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS05.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5349
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, when running on HP Tru64 UNIX, has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS07.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5350
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and local attack vectors, aka Vuln# OHS08.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5351
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in Oracle Application Express (formerly Oracle HTML DB) 1.5 up to 2.0 have unknown impact and remote attack vectors, aka Vuln# (1) APEX01, (2) APEX02, (3) APEX03, (4) APEX05, (5) APEX06, (6) APEX07, (7) APEX08, (8) APEX09, (9) APEX10, (10) APEX11, (11) APEX12, (12) APEX13, (13) APEX14, (14) APEX15, (15) APEX16, (16) APEX17, (17) APEX18, (18) APEX19, (19) APEX22, (20) APEX23, (21) APEX24, (22) APEX25, (23) APEX26, (24) APEX27, (25) APEX28, (26) APEX29, (27) APEX30, (28) APEX31, (29) APEX32, (30) APEX33, (31) APEX34, and (32) APEX35.  NOTE: as of 20061027, it is likely that some of these identifiers are associated with cross-site scripting (XSS) in WWV_FLOW_ITEM_HELP and NOTIFICATION_MSG, but these have been provided separate identifiers.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5352
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in Oracle Application Express 1.5 up to 1.6.1 have unknown impact and remote attack vectors, aka Vuln# (1) APEX04, (2) APEX20, and (3) APEX21.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5353
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors related to the Mod_rewrite Module, aka Vuln# OHS01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5354
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0, racle Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln# OHS06.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5355
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln# SSO01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5356
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, and Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln# OC4J02.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5357
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 10.1.2.0.1, 10.1.2.0.2, and 10.1.2.1.0 has unknown impact and remote attack vectors related to the PHP Module, aka Vuln# OHS03.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5358
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 has unknown impact and remote attack vectors, aka Vuln# FORM01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5359
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in Oracle Reports Developer component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Oracle E-Business Suite and Applications 11.5.10CU2, have unknown impact and remote attack vectors, aka Vuln# (1) REP01 and (2) REP02. NOTE: as of 20061027, Oracle has not disputed reports from a reliable researcher that these issues are related to (a) showenv and (b) parsequery for REP01, and (c) cellwrapper and (d) delimiter for REP02.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5360
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.2 has unknown impact and remote attack vectors, aka Vuln# FORM03.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5361
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Containers for J2EE in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.1, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln# OC4J03.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5362
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.3.0.0 has unknown impact and remote attack vectors, aka Vuln# OC4J04.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5363
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 10.1.2.0.1 and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors, aka Vuln# SSO02.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5364
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.1 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and remote authenticated attack vectors, aka Vuln# OC4J05.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5365
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors, aka Vuln# FORM02.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html