Page 8 of 41 results (0.007 seconds)

CVSS: 4.6EPSS: 0%CPEs: 9EXPL: 0

Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service (client crash) and possibly execute arbitrary code via the NOTES.INI file. • http://secunia.com/advisories/1013841 http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202526 http://www.osvdb.org/15367 http://www.securityfocus.com/bid/13447 https://exchange.xforce.ibmcloud.com/vulnerabilities/20044 •

CVSS: 2.1EPSS: 0%CPEs: 9EXPL: 0

HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications. • http://secunia.com/advisories/14879 http://securitytracker.com/id?1013839 http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202437 http://www.kb.cert.org/vuls/id/699798 http://www.osvdb.org/15365 https://exchange.xforce.ibmcloud.com/vulnerabilities/20045 •

CVSS: 5.0EPSS: 4%CPEs: 10EXPL: 1

Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service (crash) via unknown vectors related to Java applets, as identified by KSPR62F4KN. • https://www.exploit-db.com/exploits/24275 http://secunia.com/advisories/12046 http://www-1.ibm.com/support/docview.wss?rs=475&context=SSKTWP&q1=Java&uid=swg21173910&loc=en_US&cs=utf-8&lang=en http://www.osvdb.org/8418 http://www.securityfocus.com/bid/10704 •

CVSS: 10.0EPSS: 0%CPEs: 9EXPL: 0

Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by (1) KSPR5YS6GR and (2) KSPR62F4D3. • http://secunia.com/advisories/12046 http://www-1.ibm.com/support/docview.wss?rs=475&context=SSKTWP&q1=Java&uid=swg21173910&loc=en_US&cs=utf-8&lang=en http://www.osvdb.org/8416 http://www.osvdb.org/8417 http://www.securityfocus.com/bid/10704 •

CVSS: 10.0EPSS: 72%CPEs: 2EXPL: 1

Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe. Vulnerabilidad de inyección de argumentos en IBM Lotus Notes 6.0.3 y 6.5 permite a atacantes remotos ejecutar código de su eleccion mediante una URI notes: que usa un nombre de ruta de red UNC para proveer un fichero de configuración notes.ini alternativo a notes.exe. • http://marc.info/?l=bugtraq&m=108843896506099&w=2 http://www-1.ibm.com/support/docview.wss?rs=475/context=SSKTWP&uid=swg21169510 http://www.idefense.com/application/poi/display?id=111&type=vulnerabilities http://www.securityfocus.com/bid/10600 https://exchange.xforce.ibmcloud.com/vulnerabilities/16496 • CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') •