Ibm

Lotus Notes

71 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7

CVE-2013-0522

  • EPSS 0.04%
  • Published 16.07.2018 14:29:00
  • Last modified 21.11.2024 01:47:43

The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving an unspecified operating system communication mechanism for password tra...

7.5

CVE-2014-3086

  • EPSS 2.86%
  • Published 12.08.2014 00:55:03
  • Last modified 12.04.2025 10:46:40

Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain privileges by leveraging the ability to execute code in the context of a ...

5

CVE-2014-0892

  • EPSS 1.32%
  • Published 23.04.2014 19:55:05
  • Last modified 12.04.2025 10:46:40

IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by leveraging the absence of the NX protection mechanis...

9.3

CVE-2012-6349

  • EPSS 7.95%
  • Published 18.07.2013 16:51:55
  • Last modified 11.04.2025 00:51:21

Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrary code via a crafted file, aka SPR KLYH92XL3W.

7.2

CVE-2013-0536

  • EPSS 0.05%
  • Published 21.06.2013 17:55:01
  • Last modified 11.04.2025 00:51:21

ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges via vectors that arrange for code to be executed during the next login...

6.8

CVE-2013-2977

  • EPSS 16.14%
  • Published 10.05.2013 11:42:30
  • Last modified 11.04.2025 00:51:21

Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix 1 on Windows, and 8.5.x before 8.5.3 FP5 and 9.x before 9.0.1 on Linux, allows remote attackers to execute arbitrary code via a malformed PNG image in a...

4.3

CVE-2013-0538

  • EPSS 0.53%
  • Published 01.05.2013 12:00:07
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95...

5.8

CVE-2013-0127

  • EPSS 1.07%
  • Published 01.05.2013 12:00:07
  • Last modified 11.04.2025 00:51:21

IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality...

9.3

CVE-2012-4823

  • EPSS 13.16%
  • Published 11.01.2013 00:55:01
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, T...

9.3

CVE-2012-4821

  • EPSS 5.99%
  • Published 11.01.2013 00:55:01
  • Last modified 11.04.2025 00:51:21

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rationa...