CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2006-1948
https://notcve.org/view.php?id=CVE-2006-1948
20 Apr 2006 — The "Add Sender to Address Book" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted remote attackers to trick a user into sending e-mail to an unauthorized recipient. • http://securitytracker.com/id?1015914 •
CVSS: 7.5EPSS: 0%CPEs: 14EXPL: 0CVE-2006-0117
https://notcve.org/view.php?id=CVE-2006-0117
09 Jan 2006 — Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service (router crash or hang) via unspecified vectors involving "CD to MIME Conversion". • http://secunia.com/advisories/18328 •
CVSS: 7.5EPSS: 0%CPEs: 14EXPL: 0CVE-2006-0118
https://notcve.org/view.php?id=CVE-2006-0118
09 Jan 2006 — Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service (deep recursion leading to stack overflow and crash) via long formulas. • http://secunia.com/advisories/18328 •
CVSS: 10.0EPSS: 13%CPEs: 14EXPL: 0CVE-2006-0119
https://notcve.org/view.php?id=CVE-2006-0119
09 Jan 2006 — Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers (1) GPKS6C9J67 in Agents, (2) JGAN6B6TZ3 and (3) KSPR699NBP in the Router, (4) GPKS5YQGPT in Security, or (5) HSAO6BNL6Y in the Web Server. NOTE: vector 3 is related to an issue in NROUTER in IBM Lotus Notes and Domino Server before 6.5.4 FP1, 6.5.5, and 7.0, which allows remote attackers to cause a denial of service (C... • http://secunia.com/advisories/18328 •
CVSS: 7.5EPSS: 3%CPEs: 14EXPL: 0CVE-2006-0120
https://notcve.org/view.php?id=CVE-2006-0120
09 Jan 2006 — Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via multiple vectors, involving (1) a malformed message sent to an "Out Of Office" agent (SPR LPEE6DMQWJ), (2) the compact command (RTIN5U2SAJ), (3) malformed bitmap images (MYAA6FH5HW), (4) the "Delete Attachment" action (YPHG6844LD), (5) parsing certificates from a remote Certificate Table (AELE6DZFJW), and (6) creating a SSL key ring with the Domino Admin... • http://secunia.com/advisories/18328 •
CVSS: 7.8EPSS: 1%CPEs: 14EXPL: 0CVE-2006-0121
https://notcve.org/view.php?id=CVE-2006-0121
09 Jan 2006 — Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (memory consumption and crash) via unknown vectors related to (1) unspecified vectors during the SSL handshake (SPR# MKIN67MQVW), (2) the stash file during the SSL handshake (SPR# MKIN693QUT), and possibly other vectors. NOTE: due to insufficient information in the original vendor advisory, it is not clear whether there is an attacker role in other memory leaks that are specified in the advis... • http://secunia.com/advisories/18328 •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2005-2454
https://notcve.org/view.php?id=CVE-2005-2454
31 Dec 2005 — IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder. • http://secunia.com/advisories/19537 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 49%CPEs: 14EXPL: 0CVE-2005-2618
https://notcve.org/view.php?id=CVE-2005-2618
31 Dec 2005 — Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, F... • http://secunia.com/advisories/16100 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 1%CPEs: 14EXPL: 0CVE-2005-2619
https://notcve.org/view.php?id=CVE-2005-2619
31 Dec 2005 — Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a (1) ZIP, (2) UUE or (3) TAR archive that contains a .. (dot dot) in the filename, which is not properly handled when generating a preview. • http://secunia.com/advisories/16100 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 0%CPEs: 9EXPL: 0CVE-2005-1405
https://notcve.org/view.php?id=CVE-2005-1405
03 May 2005 — HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications. • http://secunia.com/advisories/14879 •