Page 2 of 21 results (0.003 seconds)

CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0

CVE-2013-5389

https://notcve.org/view.php?id=CVE-2013-5389

22 Oct 2013 — Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK2X. Vulnerabilidad de XSS en iNotes de IBM Domino 8.5.3 anterior a FP5 IF2 y 9.0 anterior a IF5 permite a atacantes remotos inyectar script web arbitrario o HTML a través de vectores sin especificar, aka SPR PTHN9AYK2X. • http://www-01.ibm.com/support/docview.wss?uid=swg21653149 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 9%CPEs: 7EXPL: 0

CVE-2013-4068

https://notcve.org/view.php?id=CVE-2013-4068

20 Sep 2013 — Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka SPR PTHN9ADPA8. Desbordamiento de buffer en iNotes en IBM Domino 8.5.3 anterior a FP5 IF1 y 9.0 anterior a IF4 permite a los usuarios remotos autenticados ejecutar código arbitrario a través de vectores no especificados, también conocido como SPR PTHN9ADPA8. • http://www-01.ibm.com/support/docview.wss?uid=swg21649476 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.4EPSS: 0%CPEs: 22EXPL: 0

CVE-2013-0590 – IBM iNotes Cross Site Scripting

https://notcve.org/view.php?id=CVE-2013-0590

27 Aug 2013 — Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3, a different vulnerability than CVE-2013-0591. Vulnerabilidad Cross-site scripting (XSS) en iNotes v8.5.x en IBM Lotus Domino v8.5 anterior a v8.5.3 FP5, permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a través de vectores no especificados, también conocido como... • http://www-01.ibm.com/support/docview.wss?uid=swg21647740 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 22EXPL: 0

CVE-2013-0591 – IBM iNotes Cross Site Scripting

https://notcve.org/view.php?id=CVE-2013-0591

27 Aug 2013 — Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3, a different vulnerability than CVE-2013-0590. Vulnerabilidad Cross-site scripting (XSS) en iNotes v8.5.x en IBM Lotus Domino v8.5 anterior a v8.5.3 FP5, permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a través de vectores no especificados, también conocido como... • http://www-01.ibm.com/support/docview.wss?uid=swg21647740 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 22EXPL: 0

CVE-2013-0595 – IBM iNotes Cross Site Scripting

https://notcve.org/view.php?id=CVE-2013-0595

27 Aug 2013 — Multiple cross-site scripting (XSS) vulnerabilities in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3. Múltiples vulnerabilidades de cross-site scripting (XSS) en iNotes v8.5.x en IBM Lotus Domino v8.5 anterior a v8.5.3 FP5, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados, también conocido como SPR PTHN95XNR3. IBM Lotus iNotes suffered ... • http://www-01.ibm.com/support/docview.wss?uid=swg21647740 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 19EXPL: 0

CVE-2013-3990

https://notcve.org/view.php?id=CVE-2013-3990

09 Aug 2013 — Cross-site scripting (XSS) vulnerability in the MIME e-mail functionality in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN98FLQ2. Vulnerabilidad Cross-site scripting (XSS) en la funcionalidad MIME e-mail en iNotes en IBM Domino v9.0 anterior a IF3 permite a atacantes remotos inyectar código script o HTML a través de vectores sin especificar, también conocido como SPR PTHN98FLQ2. • http://www-01.ibm.com/support/docview.wss?uid=swg21644599 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 17EXPL: 0

CVE-2013-3032

https://notcve.org/view.php?id=CVE-2013-3032

09 Aug 2013 — Cross-site scripting (XSS) vulnerability in the MIME e-mail functionality in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN986NAA. Vulnerabilidad Cross-site scripting (XSS) en la funcionalidad MIME e-mail en iNotes en IBM Domino v9.0 anterior a IF3 permite a atacantes remotos inyectar código script o HTML a través de vectores sin especificar, también conocido como SPR PTHN986NAA. • http://www-01.ibm.com/support/docview.wss?uid=swg21644599 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.8EPSS: 6%CPEs: 128EXPL: 0

CVE-2012-4821 – JDK: getDeclaredMethods() and setAccessible() code execution

https://notcve.org/view.php?id=CVE-2012-4821

11 Jan 2013 — Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote... • http://rhn.redhat.com/errata/RHSA-2012-1467.html •

CVSS: 9.8EPSS: 13%CPEs: 128EXPL: 0

CVE-2012-4823 – JDK: java.lang.ClassLoder defineClass() code execution

https://notcve.org/view.php?id=CVE-2012-4823

11 Jan 2013 — Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers... • http://rhn.redhat.com/errata/RHSA-2012-1466.html •

CVSS: 9.8EPSS: 9%CPEs: 128EXPL: 0

CVE-2012-4820 – JDK: java.lang.reflect.Method invoke() code execution

https://notcve.org/view.php?id=CVE-2012-4820

11 Jan 2013 — Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a se... • http://rhn.redhat.com/errata/RHSA-2012-1465.html •