rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-2336 
index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the web document root via the download parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T20:00:00.000Z
CVE-2010-2337 
Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-27T22:00:00.000Z
CVE-2010-2338 
Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T21:00:00.000Z
CVE-2010-2339 
SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T21:00:00.000Z
CVE-2010-2340 
SQL injection vulnerability in members.php in Arab Portal 2.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the by parameter in the msearch action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T21:00:00.000Z
CVE-2010-2341 
PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tpl_base_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T21:00:00.000Z
CVE-2010-2342 
SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T15:00:00.000Z
CVE-2010-2343 
Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbitrary code via a crafted pls playlist file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T15:00:00.000Z
CVE-2010-2344 
Multiple cross-site scripting (XSS) vulnerabilities in odCMS 1.06, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Page parameter to (1) _main/index.php, (2) _members/index.php, (3) _forum/index.php, (4) _docs/index.php, and (5) _announcements/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T15:00:00.000Z
CVE-2010-2345 
Cross-site request forgery (CSRF) vulnerability in odCMS 1.06, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests that change the administrative password, and other unspecified requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T15:00:00.000Z
CVE-2010-2347 
The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 through 7.30 allows remote authenticated users to bypass a security check and conduct SMB relay attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T19:00:00.000Z
CVE-2010-2348 
Stack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows remote attackers to execute arbitrary code via a long line in a .WAV file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T19:00:00.000Z
CVE-2010-2349 
H264WebCam 3.7 allows remote attackers to cause a denial of service (crash) via a long URI in a GET request, which triggers a NULL pointer dereference.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T19:00:00.000Z
CVE-2010-2350 
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T19:00:00.000Z
CVE-2010-2351 
Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code via a Sessions Setup AndX packet with a long AccountName.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T19:00:00.000Z
CVE-2010-2352 
The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupal does not perform access checks before displaying referenced nodes, which allows remote attackers to read controlled nodes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T19:00:00.000Z
CVE-2010-2353 
The Node Reference module in Content Construction Kit (CCK) module 6.x before 6.x-2.7 for Drupal does not perform access checks for the source field in the backend URL for the autocomplete widget, which allows remote attackers to discover titles and IDs of controlled nodes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T19:00:00.000Z
CVE-2010-2354 
SQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to execute arbitrary SQL commands via the course_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T20:00:00.000Z
CVE-2010-2355 
Cross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the message parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T20:00:00.000Z
CVE-2010-2356 
Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the course_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T20:00:00.000Z
CVE-2010-2357 
SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute arbitrary SQL commands via the p_id parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T20:00:00.000Z
CVE-2010-2358 
PHP remote file inclusion vulnerability in modules/catalog/upload_photo.php in Nakid CMS 0.5.2, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the core[system_path] parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T20:00:00.000Z
CVE-2010-2359 
SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizType parameter, a different vector than CVE-2007-1706.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T20:00:00.000Z
CVE-2010-2360 
Multiple buffer overflows in Winny 2.0b7.1 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2006-2007.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-25T19:00:00.000Z
CVE-2010-2361 
Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-25T19:00:00.000Z
CVE-2010-2362 
Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-25T19:00:00.000Z
CVE-2010-2363 
The IPv6 Unicast Reverse Path Forwarding (RPF) implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is used, does not properly drop packets, which might allow remote attackers to bypass intended access restrictions via a spoofed IP address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-30T19:00:00.000Z
CVE-2010-2364 
Cross-site scripting (XSS) vulnerability in Free CGI Moo moobbs before 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-31T21:00:00.000Z
CVE-2010-2365 
Cross-site scripting (XSS) vulnerability in Free CGI Moo moobbs2 before 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-31T21:00:00.000Z
CVE-2010-2366 
Cross-site scripting (XSS) vulnerability in futomi CGI Cafe Access Analyzer CGI Professional, and Standard 4.0.2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-13T20:00:00.000Z
CVE-2010-2367 
Cross-site scripting (XSS) vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-06T16:00:00.000Z
CVE-2010-2368 
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-18T16:00:00.000Z
CVE-2010-2369 
Untrusted search path vulnerability in Lhasa 0.19 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-18T16:00:00.000Z
CVE-2010-2370 
Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 MP5, and 10.3 MP2 allows remote attackers to affect integrity, related to BPM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2371 
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1.1 allows local users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-2372.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2372 
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1.1 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2371.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2373 
Unspecified vulnerability in the Console component in Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5 allows remote attackers to affect integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2374 
Unspecified vulnerability in Solaris Studio 12 update 1 allows local users to affect confidentiality and integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2375 
Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2376 
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2377 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.27 and 8.50.10 allows remote authenticated users to affect integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2378 
Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft and JDEdwards Suite CRM 9.0 Bundle #28 and CRM 9.1 Bundle #4 allows local users to affect confidentiality and integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2379 
Unspecified vulnerability in the PeopleSoft Enterprise HCM - Time & Labor component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle #13 and HCM 9.1 Bundle #2 allows remote authenticated users to affect confidentiality via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2380 
Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle #37, SCM 9.0 Bundle #30, and SCM 9.1 Bundle #4 allows local users to affect confidentiality, integrity, and availability via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2381 
Unspecified vulnerability in the Application Server Control component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0081.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2382 
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2383 
Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality and integrity, related to NFS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2384 
Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2385 
Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2386 
Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to GigaSwift Ethernet Driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2387 
vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-21T02:00:00.000Z
CVE-2010-2388 
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-13T22:00:00.000Z
CVE-2010-2389 
Unspecified vulnerability in the Perl component in Oracle Database Server 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5; and Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0; allows local users to affect integrity via unknown vectors related to Local Logon.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-13T22:00:00.000Z
CVE-2010-2390 
Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid Control allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-13T22:00:00.000Z
CVE-2010-2391 
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-13T22:00:00.000Z
CVE-2010-2392 
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect integrity and availability, related to ZFS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2393 
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to RPC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2394 
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to TCP/IP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2395 
Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2409 and CVE-2010-2410.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-13T22:00:00.000Z
CVE-2010-2396 
Unspecified vulnerability in the Forms component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-13T22:00:00.000Z
CVE-2010-2397 
Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and integrity, related to the GUI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2398 
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle #12 allows remote authenticated users to affect confidentiality via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2399 
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to Kernel/VM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2400 
Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to Kernel/Filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2401 
Unspecified vulnerability in the PeopleSoft Enterprise HCM - eProfile Mgr component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle #9 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2402 
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.27 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2403 
Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft and JDEdwards Suite Campus Solutions 9.0 Bundle #17 allows remote authenticated users to affect confidentiality via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-13T22:07:00.000Z
CVE-2010-2404 
Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect integrity via unknown vectors related to Account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-13T22:00:00.000Z
CVE-2010-2405 
Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-3500.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-13T22:00:00.000Z
CVE-2010-2406 
Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-13T22:00:00.000Z
CVE-2010-2407 
Unspecified vulnerability in the XDK component in Oracle Database Server 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-13T22:00:00.000Z
CVE-2010-2408 
Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-13T22:00:00.000Z
CVE-2010-2409 
Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2395 and CVE-2010-2410.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-13T22:00:00.000Z