deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-3609
Published: 2009-10-21
Description: Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch; http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html
CVE: CVE-2008-3684
Published: 2009-10-22
Description: Heap-based buffer overflow in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/37070; http://www.zerodayinitiative.com/advisories/ZDI-08-096/; http://secunia.com/advisories/37070
CVE: CVE-2008-3685
Published: 2009-10-22
Description: Directory traversal vulnerability in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to TCP port 2606.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/37070; http://www.zerodayinitiative.com/advisories/ZDI-08-095/; http://secunia.com/advisories/37070
CVE: CVE-2009-1479
Published: 2009-10-22
Description: Directory traversal vulnerability in client/desktop/default.htm in Boxalino before 09.05.25-0421 allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.csnc.ch/misc/files/advisories/CVE-2009-1479-Boxalino-Directory_Traversal.txt; http://www.securityfocus.com/archive/1/507319/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/53932
CVE: CVE-2009-3620
Published: 2009-10-22
Description: The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476, CWE-908
References: http://article.gmane.org/gmane.linux.kernel/892259; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7dc482dfeeeefcfd000d4271c[PII_REDACTED]756d7; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html
CVE: CVE-2009-3621
Published: 2009-10-22
Description: net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=77238f2b942b38ab4e7f3aced44084493e4a8675; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
CVE: CVE-2009-3744
Published: 2009-10-22
Description: rep_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted packet to TCP port 7144.
CVSS Score: 5.0 (MEDIUM)
References: http://retrogod.altervista.org/9sg_emc_repli_crash.html; http://www.securityfocus.com/archive/1/507322/100/0/threaded; http://www.securityfocus.com/bid/36738
CVE: CVE-2009-3745
Published: 2009-10-22
Description: Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/37093; http://www-01.ibm.com/support/docview.wss?uid=swg1PK97516; http://www-01.ibm.com/support/docview.wss?uid=swg24024704
CVE: CVE-2009-2911
Published: 2009-10-22
Description: SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: http://gcc.gnu.org/bugzilla/show_bug.cgi?id=41633; http://secunia.com/advisories/37167; http://sources.redhat.com/bugzilla/show_bug.cgi?id=10750
CVE: CVE-2009-2940
Published: 2009-10-22
Description: The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/37046; http://secunia.com/advisories/37654; http://ubuntu.com/usn/usn-870-1
CVE: CVE-2009-2942
Published: 2009-10-22
Description: The mysql-ocaml bindings 1.0.4 for MySQL do not properly support the mysql_real_escape_string function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/37047; http://www.debian.org/security/2009/dsa-1910; http://www.mandriva.com/security/advisories?name=MDVSA-2009:279
CVE: CVE-2009-2943
Published: 2009-10-22
Description: The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/37048; http://www.debian.org/security/2009/dsa-1909; http://www.osvdb.org/59029
CVE: CVE-2009-3746
Published: 2009-10-22
Description: XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711.
CVSS Score: 1.9 (LOW)
CWE: CWE-16
References: http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-29-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-268288-1; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6644
CVE: CVE-2009-3747
Published: 2009-10-22
Description: Cross-site scripting (XSS) vulnerability in index.php in TBmnetCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the content parameter.  NOTE: this was originally reported for tbmnet.php, but that program does not exist in the TBmnetCMS 1.0 distribution.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0910-exploits/tbmnetcms-xss.txt; http://secunia.com/advisories/32462; http://www.securityfocus.com/bid/36733
CVE: CVE-2009-3748
Published: 2009-10-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allow remote attackers to inject arbitrary web script or HTML via the (1) FileName, (2) IsolatedMessageID, (3) ServerName, (4) Dictionary, (5) Scoring, and (6) MessagePart parameters to web/msgList/viewmsg/actions/msgAnalyse.asp; the (7) Queue, (8) FileName, (9) IsolatedMessageID, and (10) ServerName parameters to actions/msgForwardToRiskFilter.asp and viewHeaders.asp in web/msgList/viewmsg/; and (11) the subject in an e-mail message that is held in a Queue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://kb.websense.com/display/4/kb/article.aspx?aid=4786; http://secunia.com/advisories/37091; http://sotiriu.de/adv/NSOADV-2009-003.txt
CVE: CVE-2009-3749
Published: 2009-10-22
Description: The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response.
CVSS Score: 5.0 (MEDIUM)
References: http://kb.websense.com/article.aspx?article=4786&p=12; http://kb.websense.com/display/4/kb/article.aspx?aid=4786; http://secunia.com/advisories/37091
CVE: CVE-2009-3750
Published: 2009-10-22
Description: SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the idm parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/55804; http://secunia.com/advisories/35791; http://www.exploit-db.com/exploits/9109
CVE: CVE-2009-3751
Published: 2009-10-22
Description: Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the genres_parent parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/35677; http://www.exploit-db.com/exploits/9122; http://www.securityfocus.com/bid/35641
CVE: CVE-2009-3752
Published: 2009-10-22
Description: SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the genres_parent parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35677; http://www.exploit-db.com/exploits/9122; http://www.securityfocus.com/bid/35641
CVE: CVE-2009-3753
Published: 2009-10-22
Description: Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension as a User Image, then accessing it via a request to the file in userimages, related to register.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/35677; http://www.exploit-db.com/exploits/9122; http://www.securityfocus.com/bid/35641
CVE: CVE-2009-3754
Published: 2009-10-22
Description: Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to modules/bms/invoices_discount_ajax.php, (2) f parameter to dbgraphic.php, and (3) tid parameter in a show action to advancedsearch.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9101; https://exchange.xforce.ibmcloud.com/vulnerabilities/51650; http://www.exploit-db.com/exploits/9101
CVE: CVE-2009-3755
Published: 2009-10-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php and (2) modules\base\myaccount.php; and the PATH_INFO to (3) modules_view.php, (4) tabledefs_options.php, and (5) adminsettings.php in phpbms\modules\base\.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/9101; https://exchange.xforce.ibmcloud.com/vulnerabilities/51651; http://www.exploit-db.com/exploits/9101
CVE: CVE-2009-3756
Published: 2009-10-22
Description: phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) the show action in advancedsearch.php, and (4) choicelist.php, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.exploit-db.com/exploits/9101; https://exchange.xforce.ibmcloud.com/vulnerabilities/51652; http://www.exploit-db.com/exploits/9101
CVE: CVE-2009-3757
Published: 2009-10-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to config/edituser.php; (2) location, (3) sessionid, and (4) vmname parameters to console.php; (5) vmrefid and (6) vmname parameters to forcerestart.php; and (7) vmname and (8) vmrefid parameters to forcesd.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt; http://securitytracker.com/id?1022520; http://www.exploit-db.com/exploits/9106
CVE: CVE-2009-3758
Published: 2009-10-22
Description: SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt; http://securitytracker.com/id?1022520; http://www.exploit-db.com/exploits/9106
CVE: CVE-2009-3759
Published: 2009-10-22
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to hijack the authentication of administrators for (1) requests that change the password via the username parameter to config/changepw.php or (2) stop a virtual machine via the stop_vmname parameter to hardstopvm.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt; http://securitytracker.com/id?1022520; http://www.exploit-db.com/exploits/9106
CVE: CVE-2009-3760
Published: 2009-10-22
Description: Static code injection vulnerability in config/writeconfig.php in the sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to inject arbitrary PHP code into include/config.ini.php via the pool1 parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt; http://securitytracker.com/id?1022520; http://www.exploit-db.com/exploits/9106
CVE: CVE-2009-1007
Published: 2009-10-22
Description: Unspecified vulnerability in the Data Mining component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability, related to SYS.DMP_SYS.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36750
CVE: CVE-2009-1018
Published: 2009-10-22
Description: Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LTRIC (WMSYS.LTRIC).
CVSS Score: 5.5 (MEDIUM)
References: http://osvdb.org/59112; http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE: CVE-2009-1964
Published: 2009-10-22
Description: Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://osvdb.org/59115; http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE: CVE-2009-1965
Published: 2009-10-22
Description: Unspecified vulnerability in the Net Foundation Layer component in Oracle Database 9.2.0.8 and 10.1.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 5.4 (MEDIUM)
References: http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36760
CVE: CVE-2009-1971
Published: 2009-10-22
Description: Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users to affect integrity via unknown vectors.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36754
CVE: CVE-2009-1972
Published: 2009-10-22
Description: Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL and DBMS_SQL.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36758
CVE: CVE-2009-1979
Published: 2009-10-22
Description: Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2009 CPU.  Oracle has not commented on claims from an independent researcher that this is related to improper validation of the AUTH_SESSKEY parameter length that leads to arbitrary code execution.
CVSS Score: 10.0 (HIGH)
References: http://blogs.conus.info/node/28; http://osvdb.org/59110; http://secunia.com/advisories/37027
CVE: CVE-2009-1985
Published: 2009-10-22
Description: Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/59111; http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE: CVE-2009-1990
Published: 2009-10-22
Description: Unspecified vulnerability in the Business Intelligence Enterprise Edition component in Oracle Application Server 10.1.3.4.1 allows local users to affect confidentiality via unknown vectors.
CVSS Score: 1.7 (LOW)
References: http://osvdb.org/59117; http://secunia.com/advisories/37099; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE: CVE-2009-1991
Published: 2009-10-22
Description: Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC.  NOTE: the previous information was obtained from the October 2009 CPU.  Oracle has not commented on claims from an established researcher that this is for multiple SQL injection vulnerabilities via the (1) idx_owner or (2) idx_name parameters to the create_tables procedure.
CVSS Score: 3.6 (LOW)
References: http://osvdb.org/59113; http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE: CVE-2009-1992
Published: 2009-10-22
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36742
CVE: CVE-2009-1993
Published: 2009-10-22
Description: Unspecified vulnerability in the Application Express component in Oracle Database 3.0.1 allows remote authenticated users to affect confidentiality and integrity, related to FLOWS_030000.WWV_EXECUTE_IMMEDIATE.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36759
CVE: CVE-2009-1994
Published: 2009-10-22
Description: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability, related to MDSYS.PRVT_CMT_CBK.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36744
CVE: CVE-2009-1995
Published: 2009-10-22
Description: Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_AQ_INV.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/59109; http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE: CVE-2009-1997
Published: 2009-10-22
Description: Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36751
CVE: CVE-2009-1998
Published: 2009-10-22
Description: Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/59114; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36775
CVE: CVE-2009-1999
Published: 2009-10-22
Description: Unspecified vulnerability in the Business Intelligence Enterprise Edition component in unspecified Oracle Application Server versions allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/59118; http://secunia.com/advisories/37099; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE: CVE-2009-2000
Published: 2009-10-22
Description: Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36756
CVE: CVE-2009-2001
Published: 2009-10-22
Description: Unspecified vulnerability in the PL/SQL component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/37027; http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36743
CVE: CVE-2009-2002
Published: 2009-10-22
Description: Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote attackers to affect integrity via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36774; http://www.securitytracker.com/id?1023062
CVE: CVE-2009-3392
Published: 2009-10-22
Description: Unspecified vulnerability in the Agile Engineering Data Management (EDM) component in Oracle E-Business Suite 6.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 5.4 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html; http://www.securityfocus.com/bid/36770; http://www.securitytracker.com/id?1023059