deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-0488
Published: 2011-01-18
Description: Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://downloadt.advantech.com/download/downloadsr.aspx?File_Id=1-I1D7QD; http://secunia.com/advisories/42883; http://secunia.com/advisories/42903
CVE: CVE-2011-0489
Published: 2011-01-18
Description: The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to modify data, obtain sensitive information, or cause a denial of service by sending requests over TCP to (1) the Lock Server or (2) the Advanced Multithreaded Server, as demonstrated by commands that are ordinarily sent by the (a) ookillls and (b) oostopams applications.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://osvdb.org/70424; http://secunia.com/advisories/42901; http://www.exploit-db.com/exploits/15988
CVE: CVE-2006-7243
Published: 2011-01-18
Description: PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://bugs.php.net/39863; http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html
CVE: CVE-2010-4697
Published: 2011-01-18
Description: Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service (heap memory corruption) or have unspecified other impact via vectors related to use of __set, __get, __isset, and __unset methods on objects accessed by a reference.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://bugs.php.net/52879; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2507&w=2; http://www.php.net/ChangeLog-5.php
CVE: CVE-2010-4698
Published: 2011-01-18
Description: Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service (application crash) via a large number of anti-aliasing steps in an argument to the imagepstext function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://bugs.php.net/53492; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2507&w=2; http://seclists.org/fulldisclosure/2010/Dec/180
CVE: CVE-2010-4699
Published: 2011-01-18
Description: The iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not properly handle encodings that are unrecognized by the iconv and mbstring (aka Multibyte String) implementations, which allows remote attackers to trigger an incomplete output array, and possibly bypass spam detection or have unspecified other impact, via a crafted Subject header in an e-mail message, as demonstrated by the ks_c_5601-1987 character set.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://bugs.php.net/52941; http://coding.derkeiler.com/Archive/PHP/php.general/2007-04/msg00605.html; http://www.php.net/ChangeLog-5.php
CVE: CVE-2010-4700
Published: 2011-01-18
Description: The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqli_fetch_assoc function, which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input that had been properly handled in earlier PHP versions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://bugs.php.net/52221; http://www.php.net/ChangeLog-5.php; http://www.securityfocus.com/bid/46056
CVE: CVE-2011-0015
Published: 2011-01-19
Description: Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote attackers to cause a denial of service via a large compression factor.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.seul.org/or/announce/Jan-2011/msg00000.html; http://blog.torproject.org/blog/tor-02129-released-security-patches; http://secunia.com/advisories/42905
CVE: CVE-2011-0016
Published: 2011-01-19
Description: Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://archives.seul.org/or/announce/Jan-2011/msg00000.html; http://blog.torproject.org/blog/tor-02129-released-security-patches; http://secunia.com/advisories/42905
CVE: CVE-2011-0427
Published: 2011-01-19
Description: Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://archives.seul.org/or/announce/Jan-2011/msg00000.html; http://blog.torproject.org/blog/tor-02129-released-security-patches; http://secunia.com/advisories/42905
CVE: CVE-2011-0490
Published: 2011-01-19
Description: Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service (daemon crash) via vectors that trigger certain log messages.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.seul.org/or/announce/Jan-2011/msg00000.html; http://blog.torproject.org/blog/tor-02129-released-security-patches; http://www.securityfocus.com/bid/45953
CVE: CVE-2011-0491
Published: 2011-01-19
Description: The tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors, related to "underflow errors."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.seul.org/or/announce/Jan-2011/msg00000.html; http://blog.torproject.org/blog/tor-02129-released-security-patches; http://www.securityfocus.com/bid/45953
CVE: CVE-2011-0492
Published: 2011-01-19
Description: Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (assertion failure and daemon exit) via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://archives.seul.org/or/announce/Jan-2011/msg00000.html; http://blog.torproject.org/blog/tor-02129-released-security-patches; http://www.securityfocus.com/bid/45953
CVE: CVE-2011-0493
Published: 2011-01-19
Description: Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might allow remote attackers to cause a denial of service (assertion failure and daemon exit) via vectors related to malformed router caches and improper handling of integer values.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://archives.seul.org/or/announce/Jan-2011/msg00000.html; http://blog.torproject.org/blog/tor-02129-released-security-patches; http://www.securityfocus.com/bid/45953
CVE: CVE-2011-0494
Published: 2011-01-19
Description: Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors.  NOTE: this might overlap CVE-2010-4622.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/42955; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87328; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87470
CVE: CVE-2010-2632
Published: 2011-01-19
Description: Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the glob implementation in libc that allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames.
CVSS Score: 7.8 (HIGH)
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10598; http://secunia.com/advisories/42984; http://secunia.com/advisories/43433
CVE: CVE-2010-3505
Published: 2011-01-19
Description: Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders, Files & Attachments, a different vulnerability than CVE-2010-4429.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/42923; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45872
CVE: CVE-2010-3510
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.3, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Node Manager.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/42975; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45847
CVE: CVE-2010-3586
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Solaris 9 allows local users to affect confidentiality and integrity via unknown vectors related to XScreenSaver.
CVSS Score: 3.6 (LOW)
References: http://secunia.com/advisories/42984; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45903
CVE: CVE-2010-3587
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle Common Applications component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to User Management.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/42922; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45870
CVE: CVE-2010-3588
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 10.1.2.3, 11.1.1.2.0, and 11.1.1.3.0 allows remote authenticated users to affect confidentiality and integrity, related to EUL Code & Schema.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/42994; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45858
CVE: CVE-2010-3589
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Logout.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/42922; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45861
CVE: CVE-2010-3590
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle Spatial component in Oracle Database Server 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality and integrity, related to MDSYS.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/42895; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45880
CVE: CVE-2010-3591
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Internal Operations.  NOTE: the previous information was obtained from the January 2011 CPU.  Oracle has not commented on claims from the original researcher that remote attackers can overwrite or delete arbitrary files via a full pathname in the second argument to the DownloadSingleMessageToFile method in the EMPOP3Lib ActiveX component (empop3.dll).
CVSS Score: 9.3 (HIGH)
References: http://dsecrg.com/pages/vul/show.php?id=305; http://secunia.com/advisories/42976; http://www.exploit-db.com/exploits/16055
CVE: CVE-2010-3592
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Internal Operations.
CVSS Score: 8.5 (HIGH)
References: http://secunia.com/advisories/42976; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45871
CVE: CVE-2010-3593
Published: 2011-01-19
Description: Unspecified vulnerability in the Health Sciences - Oracle Argus Safety component in Oracle Industry Applications 5.0, 5.0.1, 5.0.2, and 5.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Login and LDAP.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/42925; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45902
CVE: CVE-2010-3594
Published: 2011-01-19
Description: Unspecified vulnerability in the Real User Experience Insight component in Oracle Enterprise Manager Grid Control 6.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Processing.  NOTE: the previous information was obtained from the January 2011 CPU.  Oracle has not commented on claims from a reliable third party coordinator that this is SQL injection in rsynclogdird involving improper escaping of UTF-8 characters while processing log files.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/42973; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45874
CVE: CVE-2010-3595
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Import Server.  NOTE: the previous information was obtained from the January 2011 CPU.  Oracle has not commented on claims from the original researcher that remote attackers can read arbitrary files via a full pathname in the first argument to the ImportBodyText method in the EasyMail ActiveX control (emsmtp.dll).
CVSS Score: 7.8 (HIGH)
References: http://dsecrg.com/pages/vul/show.php?id=307; http://secunia.com/advisories/42976; http://www.exploit-db.com/exploits/16056
CVE: CVE-2010-3596
Published: 2011-01-19
Description: Unspecified vulnerability in the mod_ssl component in Oracle Secure Backup 10.3.0.2 allows remote attackers to affect integrity and availability via unknown vectors.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/42918; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45850
CVE: CVE-2010-3597
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.0 allows local users to affect availability, related to Outside In Viewer SDK.
CVSS Score: 1.9 (LOW)
References: http://secunia.com/advisories/42992; http://www-01.ibm.com/support/docview.wss?uid=swg21660640; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-3598
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors related to Import Export Utility.
CVSS Score: 7.1 (HIGH)
References: http://secunia.com/advisories/42976; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45846
CVE: CVE-2010-3599
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Import Server.  NOTE: the previous information was obtained from the January 2011 CPU.  Oracle has not commented on claims from the original researcher that remote attackers can overwrite arbitrary files and execute arbitrary code via a full pathname in the first argument to the WriteJPG method in the NCSECWLib ActiveX control.
CVSS Score: 9.4 (HIGH)
References: http://dsecrg.com/pages/vul/show.php?id=306; http://secunia.com/advisories/42976; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-3600
Published: 2011-01-19
Description: Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU.  Oracle has not commented on claims from a reliable third party coordinator that this issue involves an exposed JSP script that accepts XML uploads in conjunction with NULL bytes in an unspecified parameter that allow execution of arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/42895; http://secunia.com/advisories/42921; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
CVE: CVE-2010-4413
Published: 2011-01-19
Description: Unspecified vulnerability in the Scheduler Agent component in Oracle Database Server 11.1.0.7 and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/42895; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45845
CVE: CVE-2010-4414
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Extensions.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/42985; http://secunia.com/advisories/48755; http://security.gentoo.org/glsa/glsa-201204-01.xml
CVE: CVE-2010-4415
Published: 2011-01-19
Description: Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to libc.
CVSS Score: 4.1 (MEDIUM)
References: http://secunia.com/advisories/42984; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45904
CVE: CVE-2010-4416
Published: 2011-01-19
Description: Unspecified vulnerability in the Oracle GoldenGate Veridata component in Oracle Fusion Middleware 3.0.0.4 allows remote attackers to affect availability via unknown vectors related to Server.  NOTE: the previous information was obtained from the January 2011 CPU.  Oracle has not commented on claims from a reliable third party researcher that this is a buffer overflow via a crafted XML soap request and a value that does not contain the expected 0x20 terminator character.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/42979; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45868
CVE: CVE-2010-4417
Published: 2011-01-19
Description: Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the January 2011 CPU.  Oracle has not commented on claims from a reliable third party coordinator that voice-servlet/prompt-qa/Index.jspf does not properly handle null (%00) bytes in the evaluation parameter that is used in a filename, which allows attackers to create a file with an executable extension and execute arbitrary JSP code.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/42978; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45854
CVE: CVE-2010-4418
Published: 2011-01-19
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.50.11 through 8.50.15 and 8.51GA through 8.51.05 allows remote attackers to affect confidentiality, integrity, and availability, related to PIA Core Technology.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/42924; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45865
CVE: CVE-2010-4419
Published: 2011-01-19
Description: Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle #31 and 9.1 Bundle #6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Order Capture.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/42981; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45879
CVE: CVE-2010-4420
Published: 2011-01-19
Description: Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1 allows local users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 3.6 (LOW)
References: http://secunia.com/advisories/42895; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45855
CVE: CVE-2010-4421
Published: 2011-01-19
Description: Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/42895; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45905
CVE: CVE-2010-4423
Published: 2011-01-19
Description: Unspecified vulnerability in the Cluster Verify Utility component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/42895; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45859
CVE: CVE-2010-4424
Published: 2011-01-19
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.0 through 8.49.29, 8.50.0 through 8.50.14, and 8.51.0 through 8.51.04 allows remote attackers to affect availability via unknown vectors related to the Security sub-component.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/42924; http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html; http://www.securityfocus.com/bid/45862