CVSS: 7.5EPSS: 0%CPEs: 9EXPL: 0CVE-2010-4550
https://notcve.org/view.php?id=CVE-2010-4550
16 Dec 2010 — IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to cause a denial of service (sync failure) via a malformed document. IBM Lotus Notes Traveler anterior a v8.5.1.3 permite a atacantes remotos provocar una denegación de servicio (fallo de sincronización) a través de un documento mal formado. • http://www-1.ibm.com/support/docview.wss?uid=swg1LO51818 • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 0%CPEs: 8EXPL: 0CVE-2010-4551
https://notcve.org/view.php?id=CVE-2010-4551
16 Dec 2010 — IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by omitting the Internet ID field in the person document, and then using an Apple device to (1) accept or (2) decline an invitation. IBM Lotus Notes Traveler anterior a v8.5.1.2 permite a usuarios remotos autenticados causar una denegación de servicio (referencia a puntero nulo -NULL- y caída de demonio), omitiendo el campo de la identificación de Internet en el ... • http://www-1.ibm.com/support/docview.wss?uid=swg1LO49829 •
CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0CVE-2010-4552
https://notcve.org/view.php?id=CVE-2010-4552
16 Dec 2010 — Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote attackers to cause a denial of service (memory consumption and daemon outage) by sending many embedded objects in e-mail messages for iPhone clients. Pérdida de memoria en IBM Lotus Notes Traveler antes v8.5.1.1 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y corte de demonio) mediante el envío de muchos objetos incrustados en mensajes de correo electrónico para los clientes de iPhone. • http://www-1.ibm.com/support/docview.wss?uid=swg1LO46561 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0CVE-2010-4553
https://notcve.org/view.php?id=CVE-2010-4553
16 Dec 2010 — An unspecified Domino API in IBM Lotus Notes Traveler before 8.5.1.1 does not properly handle MIME types, which allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. API Domino no especificado en IBM Lotus Notes Traveler anterior a v8.5.1.1 no maneja correctamente los tipos MIME, lo cual permite a un atacante remoto provocar una denegación de servicio (caída del demonio) mediante vectores no especificados. • http://www-1.ibm.com/support/docview.wss?uid=swg1LO45478 • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 12%CPEs: 3EXPL: 0CVE-2010-1608
https://notcve.org/view.php?id=CVE-2010-1608
29 Apr 2010 — Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unknown attack vectors, as demonstrated by the vd_ln module in VulnDisco 9.0. NOTE: as of 20100222, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Desbordamiento de búfer basado en pila en IBM Lotus Notes v8.5 y v8.5fp1, y posiblement... • http://secunia.com/advisories/38622 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2010-1487
https://notcve.org/view.php?id=CVE-2010-1487
20 Apr 2010 — IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG. IBM Lotus Notes v7.0, v8.0, y v8.5 almacena credenciales administrativas en cleartext en SURunAs.exe, lo que permite a usuarios locales obtener información sensible examinando ese archivo, conocido como SPR JSTN837SEG. • http://secunia.com/advisories/39507 • CWE-255: Credentials Management Errors •
CVSS: 10.0EPSS: 2%CPEs: 31EXPL: 1CVE-2009-3032
https://notcve.org/view.php?id=CVE-2009-3032
05 Mar 2010 — Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow. Desbordamiento de entero en kvolefio.dll v8.5.0.8339 y v10.5.0.0 en Autonomy KeyView Filter SDK, tal y como se utiliza en IBM Lotus Notes v8.5, Symantec Mail Security... • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858 • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 4%CPEs: 2EXPL: 0CVE-2009-0306
https://notcve.org/view.php?id=CVE-2009-0306
04 Nov 2009 — Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion (RIM) BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained from third party information. Desbordamiento de búfer en el control ActiveX Intellisync en lnresobject.dll in BlackBerry Desktop Manager en Research In Motion (RIM) BlackBerry Desktop Software anterior a v5.0.1, ... • http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB19701 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.4EPSS: 0%CPEs: 1EXPL: 0CVE-2009-3114
https://notcve.org/view.php?id=CVE-2009-3114
09 Sep 2009 — The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K. El widget RSS reader en Lotus Notes de IBM versiones 8.0 y 8.5, guarda elementos de una fuente RSS como documentos HTML locales, lo que permite a los atacantes remotos ejecutar scripts arbitrarios en la Local Machine Zone de Internet Explorer por medio de un feed d... • http://secunia.com/advisories/36813 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 16%CPEs: 70EXPL: 0CVE-2009-3037
https://notcve.org/view.php?id=CVE-2009-3037
01 Sep 2009 — Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), and other products, allows remote attackers to execute arbitrary code via a crafted .xls spreadsheet attachment. Desbordamiento de búfer en xlssr.dll en Autonomy KeyView XLS viewer(también conocido como File Viewer para Excel)usado en IBM Lotus Notes v5.x hasta v8.5.x, Symantec Ma... • http://secunia.com/advisories/36472 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •