CVSS: 9.8EPSS: 0%CPEs: 39EXPL: 0CVE-2022-44755 – HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView
https://notcve.org/view.php?id=CVE-2022-44755
17 Dec 2022 — HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44751. This vulnerability applies to software previously licensed by IBM. HCL Notes es susceptible a una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en lasr.dll en Micro Focu... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100260 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 39EXPL: 0CVE-2022-44753 – HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView
https://notcve.org/view.php?id=CVE-2022-44753
17 Dec 2022 — HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted WordPerfect file. This vulnerability applies to software previously licensed by IBM. HCL Notes es susceptible a una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en wp6sr.dll en Micro Focus KeyView. Esto podría permitir que un atacante remoto no autenticado ... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100260 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 39EXPL: 0CVE-2022-44751 – HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView
https://notcve.org/view.php?id=CVE-2022-44751
17 Dec 2022 — HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44755. This vulnerability applies to software previously licensed by IBM. HCL Notes es susceptible a una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en lasr.dll en Micro Focu... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100260 • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 35EXPL: 0CVE-2020-14268
https://notcve.org/view.php?id=CVE-2020-14268
14 Dec 2020 — A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which would execute with the privileges of the client. Una vulnerabilidad en el manejo de mensajes MIME del cliente Notes (versiones 9 y 10), podría potencialmente ser explotada por un atacante no autenticado, resultando en un desbordamiento... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085762 • CWE-787: Out-of-bounds Write •
CVSS: 7.2EPSS: 0%CPEs: 10EXPL: 0CVE-2020-4102
https://notcve.org/view.php?id=CVE-2020-4102
02 Dec 2020 — HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Notes or execute attacker-controlled code on the client system. HCL Notes es susceptible a una vulnerabilidad de Desbordamiento de Búfer en DXL debido a una comprobación inapropiada de la entrada de usuario. Una explotación con éxito podría permitir a un atacante bloquear Notes o ejecutar código controlado por el atacante en el sistema clien... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085499 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2020-14258
https://notcve.org/view.php?id=CVE-2020-14258
21 Nov 2020 — HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the client. Versions 9, 10 and 11 are affected. HCL Notes es susceptible a una vulnerabilidad de Denegación de Servicio causada por una comprobación inapropiada de la entrada suministrada por el usuario. Un atacante remoto no autenticado podría explotar esta vulnerabilidad us... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085304 • CWE-20: Improper Input Validation •
CVSS: 6.8EPSS: 0%CPEs: 40EXPL: 0CVE-2020-4097
https://notcve.org/view.php?id=CVE-2020-4097
05 Nov 2020 — In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a buffer overflow. This could enable an attacker to crash HCL Notes or execute attacker-controlled code on the client. En HCL Notes versión 9 anterior a la versión 9.0.1 FixPack 10 Interim Fix 8, versión 10 anterior a... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084796 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 6.1EPSS: 0%CPEs: 36EXPL: 0CVE-2020-14240
https://notcve.org/view.php?id=CVE-2020-14240
05 Nov 2020 — HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials. HCL Notes versiones anteriores a 9.0.1 FP10 IF8, 10.0.1 FP6 y 11.0.1 FP1, son susceptibles a una vulnerabilidad de tipo Cross-site Scripting (XSS) almacenado... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084789 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2020-4089
https://notcve.org/view.php?id=CVE-2020-4089
26 Jun 2020 — HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected. HCL Notes es susceptible a una vulnerabilidad de filtrado de información por medio de su soporte para el protocolo "mailto". Esta vulnerabilidad podría resultar que los archivos desde el sistema de archivos de usuari... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080343 •
CVSS: 8.4EPSS: 0%CPEs: 19EXPL: 0CVE-2018-1771
https://notcve.org/view.php?id=CVE-2018-1771
20 Dec 2018 — IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe. IBM X-force ID: 148687. IBM Domino 9.0 y 9.0.1 podría permitir que un atacante ejecute comandos en el sistema desencadenando un desbordamiento de búfer en el análisis de los argumentos de la línea de comandos que se pasan a nsd.exe. IBM X-Force ID: 148687. • https://exchange.xforce.ibmcloud.com/vulnerabilities/148687 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •