CVE-2006-5342

Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.3 has unknown impact and remote authenticated attack vectors related to mdsys.sdotune, aka Vuln DB18. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB18...

CVE-2006-5361

Unspecified vulnerability in Oracle Containers for J2EE in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.1, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln OC4J03...

CVE-2006-5366

Technical details (affected components, root cause, specific impact or fixes) are not provided in the connected documents. Monitor for official advisories or vendor advisories for CVE-2006-5366 updates.

CVE-2006-5367

CVE-2006-5367 covers multiple unspecified vulnerabilities in Oracle E-Business Suite versions 11.5.7 through 11.5.10CU2, affecting components APPS03 (Oracle Applications Framework), APPS04 (Oracle Applications Technology Stack), APPS05 (Oracle Balanced Scorecard), APPS09 (Oracle Scripting), and A...

CVE-2006-5376

Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA, 8.22.11, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote authenticated attack vectors, aka Vuln 1 PSE04, 2 PSE06, 3 PSE07, and 4 PSE08...

CVE-2006-5374

Unspecified vulnerability in Oracle Pharmaceutical Applications 4.5.1 has unknown impact and remote authenticated attack vectors, aka Vuln PHAR01...

CVE-2006-5376

CVE-2006-5376 concerns multiple unspecified vulnerabilities in the PeopleTools component of Oracle PeopleSoft Enterprise across several releases (8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA and numbered updates). The description indicates unknown impact and remote authenticated attack vectors (PSE04, PSE0...

CVE-2006-5350

CVE-2006-5350 affects Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite/Applications 11.5.10CU2; the vulnerability impact is unspecified in the provided documents, with local attack vectors indicated. No concrete root-cause, exploit details, or remediation are given in the connected sources....

CVE-2006-5336

Multiple unspecified vulnerabilities in the Change Data Capture CDC component in Oracle Database 9.2.0.7, 10.1.0.5, and have unknown impact and remote authenticated attack vectors related to 1 sys.dbmscdcipublish Vuln DB05 and 2 sys.dbmscdcisubscribe DB06. NOTE: as of 20061023, Oracle has not...

CVE-2006-5345

Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdogeom, aka Vuln DB22. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB22 i...

CVE-2006-5368

Unspecified vulnerability in Oracle Exchange component in Oracle E-Business Suite 6.2.4 has unknown impact and remote attack vectors, aka Vuln APPS01...

CVE-2006-5372

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln 1 APPS11 for Oracle Universal Work Queue and 2 APPS12 for Oracle Application Object Library...

New technologies, new threats ten Web2. 0 under attack-vulnerability warning-the black bar safety net

Web2. 0 is the expression of a new generation of network applications fresh terminology. Start.com,Google maps,Writely and MySpace. com is the use of Web2. 0 paradigm. The level of technology advances, to promote the web2. 0 application development. In the network service context, it has...

CVE-2006-5238

Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors...

CVE-2006-5082

Unspecified vulnerability in Sugar Suite Open Source SugarCRM before 4.2.1 Patch C 20060917 has unspecified impact, related to code execution, and unspecified attack vectors...

CVE-2006-5082

Technical details are not publicly available in the provided documents for CVE-2006-5082; monitor for updates.

CVE-2006-5082

Unspecified vulnerability in Sugar Suite Open Source SugarCRM before 4.2.1 Patch C 20060917 has unspecified impact, related to code execution, and unspecified attack vectors...

CVE-2006-3738

Buffer overflow in the SSLgetsharedciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers...

CVE-2006-3738

Buffer overflow in the SSLgetsharedciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers...

CVE-2006-3738

CVE-2006-3738 describes a buffer overflow in OpenSSL SSL_get_shared_ciphers across 0.9.7 (up to 0.9.7l) and 0.9.8 (up to 0.9.8f). The description notes unspecified impact with remote attack vectors using a long list of ciphers. A related CVE-2007-5135 (off-by-one) extends the risk to remote code ...