deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-3229
Published: 2011-10-14
Description: Directory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute arbitrary JavaScript code, in a Safari Extensions context, via a crafted safari-extension: URL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22, CWE-94
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html; http://osvdb.org/76388; http://support.apple.com/kb/HT5000
CVE: CVE-2011-3230
Published: 2011-10-14
Description: Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html; http://osvdb.org/76389; http://support.apple.com/kb/HT5000
CVE: CVE-2011-3231
Published: 2011-10-14
Description: The SSL implementation in Apple Safari before 5.1.1 on Mac OS X before 10.7 accesses uninitialized memory during the processing of X.509 certificates, which allows remote web servers to execute arbitrary code via a crafted certificate.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html; http://osvdb.org/76390; http://support.apple.com/kb/HT5000
CVE: CVE-2011-3242
Published: 2011-10-14
Description: The Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize the Always value of the Block Cookies setting, which makes it easier for remote web servers to track users via a cookie.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html; http://osvdb.org/76391; http://support.apple.com/kb/HT5000
CVE: CVE-2011-3243
Published: 2011-10-14
Description: Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5 and Safari before 5.1.1, allows remote attackers to inject arbitrary web script or HTML via vectors involving inactive DOM windows.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html; http://osvdb.org/76353
CVE: CVE-2011-3245
Published: 2011-10-14
Description: The Keyboards component in Apple iOS before 5 displays the final character of an entered password during a subsequent use of a keyboard, which allows physically proximate attackers to obtain sensitive information by reading this character.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://osvdb.org/76329; http://support.apple.com/kb/HT4999
CVE: CVE-2011-3246
Published: 2011-10-14
Description: CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted (1) http or (2) https URL.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html
CVE: CVE-2011-3253
Published: 2011-10-14
Description: CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://support.apple.com/kb/HT4999; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
CVE: CVE-2011-3254
Published: 2011-10-14
Description: Cross-site scripting (XSS) vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary web script or HTML via an invitation note.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://support.apple.com/kb/HT4999; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
CVE: CVE-2011-3255
Published: 2011-10-14
Description: CFNetwork in Apple iOS before 5 stores AppleID credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-255
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://support.apple.com/kb/HT4999; https://exchange.xforce.ibmcloud.com/vulnerabilities/70550
CVE: CVE-2011-3256
Published: 2011-10-14
Description: FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069100.html
CVE: CVE-2011-3257
Published: 2011-10-14
Description: The Data Access component in Apple iOS before 5 does not properly handle the existence of multiple user accounts on the same mail server, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging a different account's cookie.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://osvdb.org/76325; http://support.apple.com/kb/HT4999
CVE: CVE-2011-3259
Published: 2011-10-14
Description: The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service (resource consumption) by making many connection attempts.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html; http://support.apple.com/kb/HT4999
CVE: CVE-2011-3260
Published: 2011-10-14
Description: Buffer overflow in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://support.apple.com/kb/HT4999; https://exchange.xforce.ibmcloud.com/vulnerabilities/70556
CVE: CVE-2011-3261
Published: 2011-10-14
Description: Double free vulnerability in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Excel spreadsheet.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://support.apple.com/kb/HT4999; https://exchange.xforce.ibmcloud.com/vulnerabilities/70557
CVE: CVE-2011-3426
Published: 2011-10-14
Description: Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a "Content-Disposition: attachment" HTTP header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN41657660/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000088; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
CVE: CVE-2011-3427
Published: 2011-10-14
Description: The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2011-3429
Published: 2011-10-14
Description: The Settings component in Apple iOS before 5 stores a cleartext parental-restrictions passcode in an unspecified file, which might allow physically proximate attackers to obtain sensitive information by reading this file.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://osvdb.org/76331; http://support.apple.com/kb/HT4999
CVE: CVE-2011-3430
Published: 2011-10-14
Description: The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, does not properly implement localization, which makes it easier for attackers to have an unspecified impact by leveraging incorrect configuration display.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://osvdb.org/76330; http://support.apple.com/kb/HT4999
CVE: CVE-2011-3431
Published: 2011-10-14
Description: The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the device's screen.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://osvdb.org/76327; http://support.apple.com/kb/HT4999
CVE: CVE-2011-3432
Published: 2011-10-14
Description: The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via a long tel: URL that triggers a large size for the acceptance dialog.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://osvdb.org/76335; http://support.apple.com/kb/HT4999
CVE: CVE-2011-3434
Published: 2011-10-14
Description: The WiFi component in Apple iOS before 5 stores WiFi credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-255
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://osvdb.org/76354; http://support.apple.com/kb/HT4999
CVE: CVE-2011-3435
Published: 2011-10-14
Description: Open Directory in Apple Mac OS X 10.7 before 10.7.2 allows local users to read the password data of arbitrary users via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76369; http://support.apple.com/kb/HT5002
CVE: CVE-2011-3436
Published: 2011-10-14
Description: Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76370; http://support.apple.com/kb/HT5002
CVE: CVE-2011-3437
Published: 2011-10-14
Description: Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to execute arbitrary code via a crafted embedded Type 1 font in a document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76356; http://support.apple.com/kb/HT5002
CVE: CVE-2010-4964
Published: 2011-10-16
Description: recorder_test.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a "semicolon injection" vulnerability.
CVSS Score: 9.0 (HIGH)
CWE: CWE-94
References: http://newsoft-tech.blogspot.com/2010/09/d-link-dcs-2121-and-state-of-embedded.html; http://www.openwall.com/lists/oss-security/2011/09/10/1; http://www.openwall.com/lists/oss-security/2011/09/14/4
CVE: CVE-2010-4965
Published: 2011-10-16
Description: /etc/rc.d/rc.local on the D-Link DCS-2121 camera with firmware 1.04 configures a hardcoded password of admin for the root account, which makes it easier for remote attackers to obtain shell access by leveraging a running telnetd server.
CVSS Score: 9.0 (HIGH)
CWE: CWE-255
References: http://newsoft-tech.blogspot.com/2010/09/d-link-dcs-2121-and-state-of-embedded.html; http://newsoft-tech.blogspot.com/2010/09/d-link-dcs-2121-and-state-of-embedded.html
CVE: CVE-2011-4060
Published: 2011-10-18
Description: The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environment variables when a program is spawned from a setuid program, which allows local users to overwrite files via a symlink attack.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://securityreason.com/securityalert/8475; http://www.nth-dimension.org.uk/pub/NDSA20110310.txt.asc; http://www.osvdb.org/71784
CVE: CVE-2011-4061
Published: 2011-10-18
Description: Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2) kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DT_RPATH ELF header.
CVSS Score: 6.9 (MEDIUM)
References: http://securityreason.com/securityalert/8476; http://www.nth-dimension.org.uk/downloads.php?id=77; http://www.nth-dimension.org.uk/downloads.php?id=83
CVE: CVE-2011-4062
Published: 2011-10-18
Description: Buffer overflow in the kernel in FreeBSD 7.3 through 9.0-RC1 allows local users to cause a denial of service (panic) or possibly gain privileges via a bind system call with a long pathname for a UNIX socket.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/46202; http://secunia.com/advisories/46564; http://security.freebsd.org/advisories/FreeBSD-SA-11:05.unix.asc
CVE: CVE-2011-2237
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-3523.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/76491; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://osvdb.org/76491
CVE: CVE-2011-2255
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle WebLogic Portal component in Oracle Fusion Middleware 9.2.3.0, 10.0.1.0, 10.2.1.0, and 10.3.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/46519; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50205
CVE: CVE-2011-2286
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows remote authenticated users to affect availability, related to ZFS.
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/76461; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://osvdb.org/76461
CVE: CVE-2011-2292
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 9 and 11 Express allows local users to affect confidentiality and integrity via unknown vectors related to xscreensaver.
CVSS Score: 2.4 (LOW)
References: http://osvdb.org/76462; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50268
CVE: CVE-2011-2301
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Text component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability, related to CTXSYS.DRVDISP.
CVSS Score: 8.5 (HIGH)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
CVE: CVE-2011-2302
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Single Sign On.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/46504; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50221
CVE: CVE-2011-2303
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Attachments / File Upload.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/46504; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50225
CVE: CVE-2011-2304
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality, related to Network Services Library (libnsl).
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/76463; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://osvdb.org/76463
CVE: CVE-2011-2306
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Linux 4 and 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to "Oracle validated."
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50194; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
CVE: CVE-2011-2308
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Online Help.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/46504; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://secunia.com/advisories/46504
CVE: CVE-2011-2309
Published: 2011-10-18
Description: Unspecified vulnerability in the Health Sciences - Oracle Clinical, Remote Data Capture component in Oracle Industry Applications 4.6 and 4.6.2 allows remote attackers to affect integrity, related to RDC Help.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/46508; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://secunia.com/advisories/46508
CVE: CVE-2011-2310
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Waveset component in Oracle Sun Products Suite 8.1.0 and 8.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to User Administration.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/46525; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://secunia.com/advisories/46525
CVE: CVE-2011-2311
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to ZFS, a different vulnerability than CVE-2011-2313.
CVSS Score: 1.7 (LOW)
References: http://osvdb.org/76464; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://osvdb.org/76464
CVE: CVE-2011-2312
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, related to ZFS.
CVSS Score: 1.7 (LOW)
References: http://osvdb.org/76465; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://osvdb.org/76465
CVE: CVE-2011-2313
Published: 2011-10-18
Description: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to ZFS, a different vulnerability than CVE-2011-2311.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
CVE: CVE-2011-2314
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors related to JavaServer Pages.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/76489; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50202
CVE: CVE-2011-2315
Published: 2011-10-18
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Security.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/46515; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50263
CVE: CVE-2011-2316
Published: 2011-10-18
Description: Unspecified vulnerability in the Siebel Apps - Marketing component in Oracle Siebel CRM 8.0.0 allows remote attackers to affect integrity via unknown vectors related to Email Marketing.
CVSS Score: 4.3 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
CVE: CVE-2011-2318
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affect confidentiality, related to WLS Security.
CVSS Score: 1.5 (LOW)
References: http://osvdb.org/76494; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://osvdb.org/76494
CVE: CVE-2011-2319
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/76493; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50206
CVE: CVE-2011-2320
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/76492; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.securityfocus.com/bid/50198
CVE: CVE-2011-2322
Published: 2011-10-18
Description: Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.1.0.7 allows remote authenticated users to affect integrity and availability, related to SYSDBA.
CVSS Score: 3.6 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
CVE: CVE-2011-2327
Published: 2011-10-18
Description: Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows local users to affect confidentiality via unknown vectors related to Delegated Administrator.
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/76479; http://secunia.com/advisories/46526; http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html