deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-0991
Published: 2011-04-13
Description: Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to finalizing and then resurrecting a DynamicMethod instance.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2011-04/msg00024.html; http://openwall.com/lists/oss-security/2011/04/06/14; http://secunia.com/advisories/44002
CVE: CVE-2011-0992
Published: 2011-04-13
Description: Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2011-04/msg00024.html; http://openwall.com/lists/oss-security/2011/04/06/14; http://secunia.com/advisories/44002
CVE: CVE-2011-0935
Published: 2011-04-14
Description: The PKI functionality in Cisco IOS 15.0 and 15.1 does not prevent permanent caching of certain public keys, which allows remote attackers to bypass authentication and have unspecified other impact by leveraging an IKE peer relationship in which a key was previously valid but later revoked, aka Bug ID CSCth82164, a different vulnerability than CVE-2010-4685.
CVSS Score: 10.0 (HIGH)
CWE: CWE-310
References: http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html; http://www.cisco.com/en/US/docs/ios/15_1s/release/notes/15_1s_caveats_15_1_1s.html; http://www.securityfocus.com/bid/47407
CVE: CVE-2011-0285
Published: 2011-04-15
Description: The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621726; http://krbdev.mit.edu/rt/Ticket/Display.html?id=6899; http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058181.html
CVE: CVE-2011-0896
Published: 2011-04-15
Description: Unspecified vulnerability in HP NFS/ONCplus B.11.31.10 and earlier on HP-UX B.11.31 allows remote authenticated users to cause a denial of service via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2556&w=2; http://secunia.com/advisories/44096; http://securityreason.com/securityalert/8201
CVE: CVE-2011-0897
Published: 2011-04-15
Description: Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.00 allows local users to read arbitrary files via unknown vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4066&w=2; http://osvdb.org/71830; http://secunia.com/advisories/44185
CVE: CVE-2011-0898
Published: 2011-04-15
Description: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.00 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4066&w=2; http://osvdb.org/71831; http://secunia.com/advisories/44185
CVE: CVE-2011-1531
Published: 2011-04-15
Description: The webscan component in the Embedded Web Server (EWS) on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to read documents on the scan surface via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5904&w=2; http://secunia.com/advisories/44143; http://securityreason.com/securityalert/8203
CVE: CVE-2011-1532
Published: 2011-04-15
Description: Unspecified vulnerability in the SNMP component on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to obtain sensitive information or modify data via vectors related to the Embedded Web Server (EWS).
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5904&w=2; http://secunia.com/advisories/44143; http://securityreason.com/securityalert/8203
CVE: CVE-2011-1533
Published: 2011-04-15
Description: Cross-site scripting (XSS) vulnerability on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5904&w=2; http://secunia.com/advisories/44143; http://securityreason.com/securityalert/8203
CVE: CVE-2011-1691
Published: 2011-04-15
Description: The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement and (2) counterReset attributes of CSSStyleDeclaration data provided by a getComputedStyle method call, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-476
References: http://code.google.com/p/chromium/issues/detail?id=77665; http://googlechromereleases.blogspot.com/2011/04/beta-channel-update_12.html; http://trac.webkit.org/changeset/82222
CVE: CVE-2011-0195
Published: 2011-04-15
Description: The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site.  NOTE: this may overlap CVE-2011-1202.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html; http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
CVE: CVE-2011-1300
Published: 2011-04-15
Description: The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an "off-by-three" error.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://code.google.com/p/angleproject/source/detail?r=611; http://code.google.com/p/chromium/issues/detail?id=70070; http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html
CVE: CVE-2011-1301
Published: 2011-04-15
Description: Use-after-free vulnerability in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=75629; http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html; http://secunia.com/advisories/44141
CVE: CVE-2011-1302
Published: 2011-04-15
Description: Heap-based buffer overflow in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-787
References: http://code.google.com/p/chromium/issues/detail?id=78524; http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html; http://secunia.com/advisories/44141
CVE: CVE-2011-1712
Published: 2011-04-15
Description: The txXPathNodeUtils::getXSLTId function in txMozillaXPathTreeWalker.cpp and txStandaloneXPathTreeWalker.cpp in Mozilla Firefox before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1, and SeaMonkey before 2.0.14, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html; http://www.mozilla.org/security/announce/2011/mfsa2011-18.html; https://bugzilla.mozilla.org/show_bug.cgi?id=640339
CVE: CVE-2011-1713
Published: 2011-04-15
Description: Microsoft msxml.dll, as used in Internet Explorer 8 on Windows 7, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.  NOTE: this might overlap CVE-2011-1202.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/66835; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12693
CVE: CVE-2011-1653
Published: 2011-04-18
Description: Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures.
CVSS Score: 10.0 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/44097; http://securityreason.com/securityalert/8403; http://securitytracker.com/id?1025353
CVE: CVE-2011-1654
Published: 2011-04-18
Description: Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to FileUploadHandler.ashx.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/44097; http://securitytracker.com/id?1025353; http://www.securityfocus.com/archive/1/517488/100/0/threaded
CVE: CVE-2011-1655
Published: 2011-04-18
Description: The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecified getDBConfigSettings requests, which makes it easier for remote attackers to obtain database credentials, and subsequently execute arbitrary code, by sniffing the network, related to the UNCWS Web Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://secunia.com/advisories/44097; http://securitytracker.com/id?1025353; http://www.securityfocus.com/archive/1/517492/100/0/threaded
CVE: CVE-2009-0788
Published: 2011-04-18
Description: Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information or (2) use the server as an inadvertent proxy to connect to arbitrary services and IP addresses via unspecified vectors.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/44150; http://www.redhat.com/support/errata/RHSA-2011-0434.html; http://www.securityfocus.com/bid/47316
CVE: CVE-2010-1171
Published: 2011-04-18
Description: Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors related to configuration and package group (comps.xml) files for channels.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/44150; http://www.redhat.com/support/errata/RHSA-2011-0434.html; http://www.securityfocus.com/bid/47316
CVE: CVE-2011-0012
Published: 2011-04-18
Description: The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://www.redhat.com/support/errata/RHSA-2011-0426.html; http://www.securityfocus.com/bid/47269; http://www.securitytracker.com/id?1025304
CVE: CVE-2011-0988
Published: 2011-04-18
Description: pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/44039; https://exchange.xforce.ibmcloud.com/vulnerabilities/66618; https://hermes.opensuse.org/messages/7849430
CVE: CVE-2011-1179
Published: 2011-04-18
Description: The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) plugin/nsScriptablePeer.cpp and (2) plugin/plugin.cpp, which trigger multiple uses of an uninitialized pointer.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/44060; http://www.redhat.com/support/errata/RHSA-2011-0426.html; http://www.redhat.com/support/errata/RHSA-2011-0427.html
CVE: CVE-2010-4229
Published: 2011-04-18
Description: Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/44120; http://securityreason.com/securityalert/8207; http://securitytracker.com/id?1025313
CVE: CVE-2011-0286
Published: 2011-04-18
Description: Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/44183; http://securitytracker.com/id?1025356; http://www.blackberry.com/btsc/KB26296
CVE: CVE-2011-1168
Published: 2011-04-18
Description: Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html; http://secunia.com/advisories/44065; http://secunia.com/advisories/44108
CVE: CVE-2011-1426
Published: 2011-04-18
Description: The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, launches a default handler for the filename specified in the first argument, which allows remote attackers to execute arbitrary code via a .rnx filename corresponding to a crafted RNX file.
CVSS Score: 9.3 (HIGH)
References: http://securitytracker.com/id?1025351; http://service.real.com/realplayer/security/04122011_player/en/; http://www.securityfocus.com/archive/1/517470/100/0/threaded
CVE: CVE-2011-1496
Published: 2011-04-18
Description: tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058367.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058452.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058548.html
CVE: CVE-2011-1518
Published: 2011-04-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.4.x before 2.4.10 and 3.x before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html; http://otrs.org/advisory/OSA-2011-01-en/; http://secunia.com/advisories/44029
CVE: CVE-2011-1714
Published: 2011-04-18
Description: Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues/; http://osvdb.org/71718; http://osvdb.org/71720
CVE: CVE-2011-1715
Published: 2011-04-18
Description: Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to read arbitrary files via ..%2f (encoded dot dot) sequences in the file parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues/; http://osvdb.org/71719; http://osvdb.org/71721
CVE: CVE-2011-1716
Published: 2011-04-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/71489; http://secunia.com/advisories/44036; http://securityreason.com/securityalert/8209
CVE: CVE-2011-1717
Published: 2011-04-18
Description: Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://blogs.skype.com/security/2011/04/privacy_vulnerability_in_skype.html; http://www.androidpolice.com/2011/04/14/exclusive-vulnerability-in-skype-for-android-is-exposing-your-name-phone-number-chat-logs-and-a-lot-more/; http://www.securitytracker.com/id?1025387
CVE: CVE-2009-5071
Published: 2011-04-19
Description: Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."
CVSS Score: 10.0 (HIGH)
References: http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121; http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121
CVE: CVE-2011-0412
Published: 2011-04-19
Description: Oracle Solaris 8, 9, and 10 stores back-out patch files (undo.Z) unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://osvdb.org/71646; http://secunia.com/advisories/44047; http://www.kb.cert.org/vuls/id/648244
CVE: CVE-2011-1721
Published: 2011-04-19
Description: Cross-site request forgery (CSRF) vulnerability in php/partie_administrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that (1) modify passwords or (2) add new projects.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/71844; http://secunia.com/advisories/44118; http://securityreason.com/securityalert/8212
CVE: CVE-2011-1722
Published: 2011-04-19
Description: Multiple SQL injection vulnerabilities in WEC Discussion Forum (wec_discussion) extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/71674; http://secunia.com/advisories/44055; http://typo3.org/extensions/repository/view/wec_discussion/2.1.1/
CVE: CVE-2011-1723
Published: 2011-04-19
Description: Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to projects/hg-helloworld/news/.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/71564; http://secunia.com/advisories/43999; http://securityreason.com/securityalert/8211
CVE: CVE-2011-0785
Published: 2011-04-20
Description: Unspecified vulnerability in the Oracle Help component in Oracle Database Server 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, and 10.1.0.5; and Oracle Fusion Middleware 11.1.1.2.0, 11.1.1.3.0, and 11.1.1.4.0 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html; http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
CVE: CVE-2011-0787
Published: 2011-04-20
Description: Unspecified vulnerability in the Application Service Level Management component in Oracle Database Server 11.1.0.7 and Enterprise Manager Grid Control allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Service Level Agreements.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html; http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
CVE: CVE-2011-0789
Published: 2011-04-20
Description: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html; http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
CVE: CVE-2011-0790
Published: 2011-04-20
Description: Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality via unknown vectors related to wbem.
CVSS Score: 1.7 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html; http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
CVE: CVE-2011-0791
Published: 2011-04-20
Description: Unspecified vulnerability in the Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Data Export.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html; http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
CVE: CVE-2011-0792
Published: 2011-04-20
Description: Unspecified vulnerability in the Oracle Warehouse Builder component in Oracle Database Server 10.2.0.5 (OWB) and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Dimensional Data Modeling.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html; http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html