| Max CVSS | 5.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-2293 | 2.1 |
Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information.
|
08-02-2024 - 20:13 | 18-07-2005 - 04:00 | |
| CVE-2005-3205 | 3.5 |
Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to inject arbitrary web script or HTML via script in the "set markup HTML TABLE" command, which is executed when th
|
11-07-2017 - 01:33 | 14-10-2005 - 10:02 | |
| CVE-2005-3207 | 5.0 |
The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command.
|
11-07-2017 - 01:33 | 14-10-2005 - 10:02 | |
| CVE-2005-3204 | 4.3 |
Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.
|
11-07-2017 - 01:33 | 14-10-2005 - 10:02 | |
| CVE-2005-3206 | 5.0 |
iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command.
|
11-07-2017 - 01:33 | 14-10-2005 - 10:02 | |
| CVE-2005-2294 | 2.1 |
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit
|
11-07-2017 - 01:32 | 18-07-2005 - 04:00 | |
| CVE-2005-2292 | 2.1 |
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.
|
11-07-2017 - 01:32 | 18-07-2005 - 04:00 |