
CVE-2018-1435
https://notcve.org/view.php?id=CVE-2018-1435
14 Mar 2018 — IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a malicious executable in an attacker-controlled directory, which could result in code execution. IBM X-Force ID: 139563. IBM Notes 8.5 y 9.0 es vulnerable a un ataque de secuestro de DLL. Un atacante remoto podría engañar a un usuario para que haga doble clic sobre un ejecutable malicioso en un directorio controlado por el atacante, lo que podría resultar en la ejecución de código. • http://www.ibm.com/support/docview.wss?uid=swg22014198 • CWE-426: Untrusted Search Path •

CVE-2018-1437
https://notcve.org/view.php?id=CVE-2018-1437
14 Mar 2018 — IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565. IBM Notes 8.5 y 9.0 podría permitir que un atacante ejecute código arbitrario en el sistema. Esto ha sido provocado por un error relacionado con múltiples rutas de búsqueda no fiables. • http://www.ibm.com/support/docview.wss?uid=swg22014201 • CWE-426: Untrusted Search Path •

CVE-2018-1409
https://notcve.org/view.php?id=CVE-2018-1409
19 Feb 2018 — IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138708. IBM Notes Diagnostics (IBM Client Application Access e IBM Notes) podría permitir que un usuario local ejecute comandos en el sistema. Esto se logra al manipular una línea de comandos enviada mediante el IPC de la memoria com... • http://www.ibm.com/support/docview.wss?uid=swg22010766 •

CVE-2018-1410
https://notcve.org/view.php?id=CVE-2018-1410
19 Feb 2018 — IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138709. IBM Notes Diagnostics (IBM Client Application Access e IBM Notes) podría permitir que un usuario local ejecute comandos en el sistema. Esto se logra al manipular una línea de comandos enviada mediante el IPC de la memoria com... • http://www.ibm.com/support/docview.wss?uid=swg22010766 •

CVE-2018-1411
https://notcve.org/view.php?id=CVE-2018-1411
19 Feb 2018 — IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138710. IBM Notes Diagnostics (IBM Client Application Access e IBM Notes) podría permitir que un usuario local ejecute comandos en el sistema. Esto se logra al manipular una línea de comandos enviada mediante el IPC de la memoria com... • http://www.ibm.com/support/docview.wss?uid=swg22010766 •