Ibm

Lotus Domino

86 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2005-3015

Exploit
  • EPSS 0.35%
  • Published 21.09.2005 21:03:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) BaseTarget or (2) Src parameters.

5

CVE-2005-2428

  • EPSS 6.32%
  • Published 03.08.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password ha...

5

CVE-2005-1441

  • EPSS 1.43%
  • Published 03.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause a denial of service via the Notes protocol (NRPC).

4.3

CVE-2004-2310

Exploit
  • EPSS 6.94%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console.

3.6

CVE-2004-2311

Exploit
  • EPSS 0.66%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or determine the existence of files via a .. (dot dot) in the new folder dialog.

6.4

CVE-2004-2369

Exploit
  • EPSS 0.26%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. (dot dot) in the directory creation command.

4.3

CVE-2004-1621

Exploit
  • EPSS 3.43%
  • Published 18.10.2004 04:00:00
  • Last modified 03.04.2025 01:03:51

NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the...

7.5

CVE-2004-0669

  • EPSS 0.64%
  • Published 06.08.2004 04:00:00
  • Last modified 03.04.2025 01:03:51

Lotus Domino 6.5.0 and 6.5.1, with IMAP enabled, allows remote authenticated users to change their quota by using the IMAP setquota command.

4.6

CVE-2004-0029

  • EPSS 0.05%
  • Published 20.01.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges.

5

CVE-2003-0123

  • EPSS 4.14%
  • Published 18.03.2003 05:00:00
  • Last modified 03.04.2025 01:03:51

Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line.