rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-2539 
The Sun Cluster Global File System in Sun Cluster 3.1 on Sun Solaris 8 through 10, when an underlying ufs filesystem is used, might allow local users to read data from arbitrary deleted files, or corrupt files in global filesystems, via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-03T15:00:00.000Z
CVE-2008-2540 
Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the (1) Desktop directory on Windows or (2) Downloads directory on Mac OS X, and subsequently allows remote attackers to execute arbitrary code on Windows by leveraging an untrusted search path vulnerability in (a) Internet Explorer 7 on Windows XP or (b) the SearchPath function in Windows XP, Vista, and Server 2003 and 2008, aka a "Carpet Bomb" and a "Blended Threat Elevation of Privilege Vulnerability," a different issue than CVE-2008-1032. NOTE: Apple considers this a vulnerability only because the Microsoft products can load application libraries from the desktop and, as of 20080619, has not covered the issue in an advisory for Mac OS X.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-03T15:00:00.000Z
CVE-2008-2541 
Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to (1) the file month field in a LIST command; (2) the PASV command; and (3) directories, files, and links in a LIST command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T20:00:00.000Z
CVE-2008-2542 
Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-assisted remote attackers to execute arbitrary code via a crafted PNM file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T20:21:00.000Z
CVE-2008-2543 
The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP port that is intended solely for localhost communication, and interprets some TCP application-data fields as addresses of memory to free, which allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T20:21:00.000Z
CVE-2008-2544 
Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T12:28:53.000Z
CVE-2008-2545 
Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different case.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T22:00:00.000Z
CVE-2008-2547 
Stack-based buffer overflow in msiexec.exe 3.1.4000.1823 and 4.5.6001.22159 in Microsoft Windows Installer allows context-dependent attackers to execute arbitrary code via a long GUID value for the /x (aka /uninstall) option.  NOTE: this issue might cross privilege boundaries if msiexec.exe is reachable via components such as ActiveX controls, and might additionally require a separate vulnerability in the control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T19:17:00.000Z
CVE-2008-2548 
Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malformed JPEG image, which triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T19:17:00.000Z
CVE-2008-2549 
Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T19:17:00.000Z
CVE-2008-2550 
Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T20:00:00.000Z
CVE-2008-2551 
The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T23:00:00.000Z
CVE-2008-2552 
Unspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag before 1.1.3, allows local users to cause a denial of service (disk consumption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T20:21:00.000Z
CVE-2008-2553 
Cross-site scripting (XSS) vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote attackers to inject arbitrary web script or HTML via the userfield parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T20:21:00.000Z
CVE-2008-2554 
Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to template_permalink.asp and (2) cat parameter to template_archives_cat.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T21:00:00.000Z
CVE-2008-2555 
SQL injection vulnerability in index.php in EasyWay CMS allows remote attackers to execute arbitrary SQL commands via the mid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T21:00:00.000Z
CVE-2008-2556 
SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T21:00:00.000Z
CVE-2008-2557 
Cross-site scripting (XSS) vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Links and (2) Links Submit pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T21:00:00.000Z
CVE-2008-2558 
CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T21:00:00.000Z
CVE-2008-2559 
Integer overflow in Borland Interbase 2007 SP2 (8.1.0.256) allows remote attackers to execute arbitrary code via a malformed packet to TCP port 3050, which triggers a stack-based buffer overflow.  NOTE: this issue might be related to CVE-2008-0467.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T22:00:00.000Z
CVE-2008-2560 
SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2561 
Multiple cross-site scripting (XSS) vulnerabilities in 427BB 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to (a) register.php, (b) reminder.php, and (c) search.php; the (2) uname, (3) email, and (4) email2 parameters to register.php; the (5) email parameter to reminder.php; and the (6) keywords parameter to search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2562 
SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the css_str parameter in an edit action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2563 
Multiple cross-site scripting (XSS) vulnerabilities in (1) dsp_main.php and (2) dsp_task_editor.php in SamTodo 1.1 allow remote attackers to inject arbitrary web script or HTML via the (a) tid parameter in a main.taskeditor edit action, and the (b) completed parameter in a main.default action, to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2564 
SQL injection vulnerability in the JotLoader (com_jotloader) component 1.2.1.a and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2565 
Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) edit.php.  NOTE: it was later reported that 4.0.x is also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2566 
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the group parameter to (1) index.php or (2) the default URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2567 
Cross-site scripting (XSS) vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a history mechanism and favorites search, a different vulnerability than CVE-2007-6002.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2568 
SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a browse action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2569 
SQL injection vulnerability in the EasyBook (com_easybook) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a deleteentry action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2570 
Multiple unspecified vulnerabilities in LimeSurvey (formerly PHPSurveyor) before 1.71 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2571 
Cross-site request forgery (CSRF) vulnerability in LimeSurvey (formerly PHPSurveyor) before 1.71 allows remote attackers to change arbitrary quotas as administrators via a "modify quota" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2572 
SQL injection vulnerability in php/leer_comentarios.php in FlashBlog allows remote attackers to execute arbitrary SQL commands via the articulo_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2573 
Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a long directory name in an SSH_FXP_OPENDIR (aka opendir) command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T18:00:00.000Z
CVE-2008-2574 
Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tus_imagenes/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T22:00:00.000Z
CVE-2008-2575 
cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T22:00:00.000Z
CVE-2008-2576 
Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2, 9.1, 9.0, and 8.1 SP6 has unknown impact and local attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2577 
Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 9.2 MP1 has unknown impact and remote authenticated attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2578 
Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 and 9.2 MP1 has unknown impact and local attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2579 
Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2580 
Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2581 
Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2582 
Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2583 
Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before 20080715, has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2585 
Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2586 
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2606.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2587 
Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2588 
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 allows local users to affect confidentiality via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T21:00:00.000Z
CVE-2008-2589 
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability in the WWV_RENDER_REPORT package that allows remote attackers to execute arbitrary SQL (PL/SQL) commands via the second argument to the SHOW procedure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2590 
Unspecified vulnerability in the Instance Management component in Oracle Database 10.1.0.5 and Enterprise Manager 10.1.0.6 has unknown impact and remote authenticated attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2591 
Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2592 
Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_DEFER_SYS. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is a SQL injection vulnerability in the DELETE_TRAN procedure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2593 
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2594.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2594 
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2593.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2595 
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors.  NOTE: the previous information was obtained from the Oracle July 2008 CPU.  Oracle has not commented on reliable researcher claims that this issue is a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2596 
Unspecified vulnerability in the Mobile Application Server component in Oracle E-Business Suite 12.0.3 has unknown impact and remote authenticated attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2597 
Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2598 and CVE-2008-2599.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2598 
Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2597 and CVE-2008-2599.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2599 
Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2597 and CVE-2008-2598.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2600 
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to MDSYS.SDO_TOPO_MAP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2601 
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2602 
Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to the IMP_FULL_DATABASE role.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2603 
Unspecified vulnerability in the Resource Manager component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6, and Database Control in Enterprise Manager, has unknown impact and remote authenticated attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via the REFRESHCHOICE parameter in multiple web pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2604 
Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2605.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2605 
Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2604.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z
CVE-2008-2606 
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2586.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-15T23:00:00.000Z