deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-1361
Published: 2010-04-13
Description: Cross-site scripting (XSS) vulnerability in shop/USER_ARTIKEL_HANDLING_AUFRUF.php in PHPepperShop 2.5 allows remote attackers to inject arbitrary web script or HTML via the darstellen parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1001-exploits/phpeppershopws-xss.txt; http://www.securityfocus.com/bid/37707; https://exchange.xforce.ibmcloud.com/vulnerabilities/55561
CVE: CVE-2010-1362
Published: 2010-04-13
Description: Cross-site scripting (XSS) vulnerability in the Own Term module 6.x-1.0 for Drupal allows remote authenticated users, with "create additional terms" privileges, to inject arbitrary web script or HTML via the term description field in a term listing page.
CVSS Score: 2.1 (LOW)
CWE: CWE-79
References: http://drupal.org/node/683544; http://drupal.org/node/683576; http://secunia.com/advisories/38208
CVE: CVE-2010-1363
Published: 2010-04-13
Description: SQL injection vulnerability in the JProjects (com_j-projects) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the project parameter in a projects action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1001-exploits/joomlajprojects-sql.txt; http://www.exploit-db.com/exploits/10988; http://www.securityfocus.com/bid/37608
CVE: CVE-2010-1364
Published: 2010-04-13
Description: SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1002-exploits/uigapersonalportal-sql.txt; http://secunia.com/advisories/38757; http://www.exploit-db.com/exploits/11599
CVE: CVE-2010-1365
Published: 2010-04-13
Description: SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://4004securityproject.wordpress.com/2010/02/28/uigafanclub-index-php-sql-injection/; http://packetstormsecurity.org/1002-exploits/uigafc-sql.txt; http://secunia.com/advisories/38756
CVE: CVE-2010-1366
Published: 2010-04-13
Description: Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin_name and (2) admin_password parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1002-exploits/uigafanclub-sql.txt; http://www.exploit-db.com/exploits/11593; http://packetstormsecurity.org/1002-exploits/uigafanclub-sql.txt
CVE: CVE-2010-1367
Published: 2010-04-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/admin_login.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the (1) admin_name and (2) admin_password parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/38756; http://secunia.com/advisories/38756
CVE: CVE-2010-1368
Published: 2010-04-13
Description: SQL injection vulnerability in index.php in GameScript (GS) 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1002-exploits/gamescript-sql.txt; http://www.exploit-db.com/exploits/11577; http://www.securityfocus.com/bid/38414
CVE: CVE-2010-1369
Published: 2010-04-13
Description: SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the email parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt; http://secunia.com/advisories/38768; http://www.exploit-db.com/exploits/11589
CVE: CVE-2010-1370
Published: 2010-04-13
Description: SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the siteid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt; http://secunia.com/advisories/38768; http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt
CVE: CVE-2010-1371
Published: 2010-04-13
Description: Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to inject arbitrary web script or HTML via the address parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt; http://secunia.com/advisories/38768; http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt
CVE: CVE-2010-1372
Published: 2010-04-13
Description: SQL injection vulnerability in the HD FLV Player (com_hdflvplayer) component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/62570; http://packetstormsecurity.org/1002-exploits/joomlahdflvplayer-sql.txt; http://secunia.com/advisories/38691
CVE: CVE-2010-0086
Published: 2010-04-13
Description: Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0855.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/39439; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023869
CVE: CVE-2010-0851
Published: 2010-04-13
Description: Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/39438; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0852
Published: 2010-04-13
Description: Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/39438; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0853
Published: 2010-04-13
Description: Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8, 9.2.0.8, and DV; and Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/39438; http://secunia.com/advisories/39439; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html
CVE: CVE-2010-0854
Published: 2010-04-13
Description: Unspecified vulnerability in the Audit component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to "SELECT, INSERT or DELETE on tables subject to auditing."
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/39438; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0855
Published: 2010-04-13
Description: Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0086.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/39439; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023869
CVE: CVE-2010-0856
Published: 2010-04-13
Description: Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.2 allows remote attackers to affect availability via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/39439; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securityfocus.com/bid/39442
CVE: CVE-2010-0857
Published: 2010-04-13
Description: Unspecified vulnerability in the Oracle Workflow Cartridge component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/39441; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023859
CVE: CVE-2010-0858
Published: 2010-04-13
Description: Unspecified vulnerability in the E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect integrity via unknown vectors.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/39441; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023859
CVE: CVE-2010-0859
Published: 2010-04-13
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 ATG RUP6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/39441; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023859
CVE: CVE-2010-0860
Published: 2010-04-13
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to the Create User privilege.
CVSS Score: 7.1 (HIGH)
References: http://secunia.com/advisories/39438; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0861
Published: 2010-04-13
Description: Unspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/39441; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023859
CVE: CVE-2010-0862
Published: 2010-04-13
Description: Unspecified vulnerability in the Retail - Oracle Retail Markdown Optimization component in Oracle Industry Product Suite 13.1 allows remote attackers to affect integrity via unknown vectors related to Online Help.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securityfocus.com/bid/39444; http://www.securitytracker.com/id?1023872
CVE: CVE-2010-0863
Published: 2010-04-13
Description: Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023872; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0864
Published: 2010-04-13
Description: Unspecified vulnerability in the Retail - Oracle Retail Place In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023872; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0865
Published: 2010-04-13
Description: Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle E-Business Suite 6.1.1.0 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/39441; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023859
CVE: CVE-2010-0866
Published: 2010-04-13
Description: Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html
CVE: CVE-2010-0867
Published: 2010-04-13
Description: Unspecified vulnerability in the JavaVM component in Oracle Database 10.2.0.4, 11.1.0.7, and 11.2.0.1.0 allows remote authenticated users to affect integrity via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html
CVE: CVE-2010-0868
Published: 2010-04-13
Description: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.8 (MEDIUM)
References: http://secunia.com/advisories/39441; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023859
CVE: CVE-2010-0869
Published: 2010-04-13
Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle E-Business Suite 5.5.05.07, 5.5.06.00, and 6.0.03 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/39441; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023859
CVE: CVE-2010-0870
Published: 2010-04-13
Description: Unspecified vulnerability in the Change Data Capture component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_CDC_PUBLISH.
CVSS Score: 3.6 (LOW)
References: http://secunia.com/advisories/39438; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0871
Published: 2010-04-13
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/39441; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023859
CVE: CVE-2010-0872
Published: 2010-04-13
Description: Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3 allows remote attackers to affect availability via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/39439; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0874
Published: 2010-04-13
Description: Unspecified vulnerability in the Communications - Oracle Communications Unified Inventory Management component in Oracle Industry Product Suite 7.1 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023872; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0875
Published: 2010-04-13
Description: Unspecified vulnerability in the Life Sciences - Oracle Thesaurus Management System component in Oracle Industry Product Suite 4.5.2, 4.6, and 4.6.1 allows remote attackers to affect integrity, related to TMS Browser.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023872; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0876
Published: 2010-04-13
Description: Unspecified vulnerability in the Life Sciences - Oracle Clinical Remote Data Capture Option component in Oracle Industry Product Suite 4.5.3 and 4.6 allows remote attackers to affect integrity, related to RDC Onsite.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securitytracker.com/id?1023872; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0877
Published: 2010-04-13
Description: Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/57736
CVE: CVE-2010-0878
Published: 2010-04-13
Description: Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allows remote authenticated users to affect integrity via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/57737
CVE: CVE-2010-0879
Published: 2010-04-13
Description: Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allows remote authenticated users to affect confidentiality via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/57738
CVE: CVE-2010-0880
Published: 2010-04-13
Description: Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.26 and 8.50.07 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/57735
CVE: CVE-2010-0882
Published: 2010-04-13
Description: Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite 10 and OpenSolaris snv_134 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Trusted Extensions.
CVSS Score: 7.2 (HIGH)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020726.1-1; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0883
Published: 2010-04-13
Description: Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0884.
CVSS Score: 2.1 (LOW)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021808.1-1; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securityfocus.com/bid/39460
CVE: CVE-2010-0884
Published: 2010-04-13
Description: Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0883.
CVSS Score: 2.1 (LOW)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021808.1-1; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.securityfocus.com/bid/39464
CVE: CVE-2010-0885
Published: 2010-04-13
Description: Unspecified vulnerability in the Sun Java System Communications Express component in Oracle Sun Product Suite 6 2005Q4 (6.2) and and 6.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Address Book.
CVSS Score: 6.8 (MEDIUM)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-77-1022024.1-1; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html; http://www.us-cert.gov/cas/techalerts/TA10-103B.html
CVE: CVE-2010-0888
Published: 2010-04-13
Description: Unspecified vulnerability in the Sun Ray Server Software component in Oracle Sun Product Suite 4.0, 4.1, and 4.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Device Services.
CVSS Score: 10.0 (HIGH)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-274590-1; http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021732.1-1; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html
CVE: CVE-2010-0889
Published: 2010-04-13
Description: Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite OpenSolaris snv_68 through snv_128 allows local users to affect confidentiality via unknown vectors related to the Kernel.
CVSS Score: 4.9 (MEDIUM)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-66-273850-1; http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021697.1-1; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html
CVE: CVE-2010-0890
Published: 2010-04-13
Description: Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite 10 and OpenSolaris snv_01 through snv_98 allows local users to affect availability via unknown vectors related to the Kernel.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/39435; http://sunsolve.sun.com/search/document.do?assetkey=1-26-242386-1; http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019619.1-1
CVE: CVE-2010-0891
Published: 2010-04-13
Description: Unspecified vulnerability in the Sun Management Center component in Oracle Sun Product Suite 3.6.1 and 4.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Solaris Container Manager.
CVSS Score: 5.8 (MEDIUM)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-66-248666-1; http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019908.1-1; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html
CVE: CVE-2010-0893
Published: 2010-04-13
Description: Unspecified vulnerability in the Sun Convergence component in Oracle Sun Product Suite 1.0 allows remote attackers to affect confidentiality via unknown vectors related to Mail.
CVSS Score: 4.3 (MEDIUM)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-66-276090-1; http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021807.1-1; http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html