Page 9 of 80 results (0.008 seconds)

CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0

CVE-2009-3087

https://notcve.org/view.php?id=CVE-2009-3087

Unspecified vulnerability in nserver.exe in the server in IBM Lotus Domino 8.0 on Windows Server 2003 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Vulnerabilidad no especificada en nserver.exe en el servidor de IBM Lotus Domino v8.0 para Windows Server 2003, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de vectores desconocidos, como se ha demostrado en cierto módulo de VulnDisco Pack Professional 8.11. NOTA: a fecha de 03/09/2009, este aviso no cuenta con más información. • http://intevydis.com/vd-list.shtml http://secunia.com/advisories/36556 •

CVSS: 5.0EPSS: 4%CPEs: 4EXPL: 2

CVE-2009-1286

https://notcve.org/view.php?id=CVE-2009-1286

The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (daemon crash) via a MIME e-mail message with RFC822 attachments (aka blobs) containing malformed root entities. Vulnerabilidad en la tarea de servidor IMAP en IBM Lotus Domino v8.0.2 anterior a FP1 IF1 y v8.5 anterior IF3 permite a usuarios remotos causar una denegación de servicio (caída del servicio) a través de un mensaje de e-mail MIME con adjuntos RFC822 (o blobs) que contienen entidades root mal formadas. • http://secunia.com/advisories/34657 http://securitytracker.com/id?1022024 http://www-01.ibm.com/support/docview.wss?uid=swg21379894 http://www-01.ibm.com/support/docview.wss?uid=swg21379915 http://www-01.ibm.com/support/docview.wss?uid=swg21381562 http://www-01.ibm.com/support/docview.wss? •

CVSS: 10.0EPSS: 97%CPEs: 5EXPL: 2

CVE-2008-2240 – IBM Lotus Domino Web Server Accept-Language Stack Buffer Overflow

https://notcve.org/view.php?id=CVE-2008-2240

Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header. Desbordamiento de búfer basado en pila en el Servicio Web Server en IBM Lotus Domino anterior a 7.0.3 FP1 y 8.x anterior a 8.0.1, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) o la posibilidad de ejecutar código de su elección a través de una cabecera HTTP "Accept-Languaje". • https://www.exploit-db.com/exploits/16697 http://secunia.com/advisories/30310 http://secunia.com/advisories/30332 http://www-1.ibm.com/support/docview.wss?uid=swg21303057 http://www.attrition.org/pipermail/vim/2008-May/001988.html http://www.attrition.org/pipermail/vim/2008-May/001989.html http://www.mwrinfosecurity.com/publications/mwri_ibm-lotus-domino-accept-language-stack-overflow_2008-05-20.pdf http://www.securityfocus.com/bid/29310 http://www.securitytracker.com/id?1020098 h • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

CVE-2008-0243

https://notcve.org/view.php?id=CVE-2008-0243

Unspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a denial of service via unknown vectors. Vulnerabilidad no especificada en Lotus Domino 7.0.2, en versiones anteriores a la Fix Pack 3, permite que atacantes remotos provoquen una denegación de servicio a través de vectores desconocidos. • http://secunia.com/advisories/28411 http://www-1.ibm.com/support/docview.wss?uid=swg27011539 http://www.securityfocus.com/bid/27215 http://www.vupen.com/english/advisories/2008/0086 https://exchange.xforce.ibmcloud.com/vulnerabilities/39588 •

CVSS: 4.3EPSS: 0%CPEs: 4EXPL: 0

CVE-2007-5924

https://notcve.org/view.php?id=CVE-2007-5924

Cross-site scripting (XSS) vulnerability in the Web Server (HTTP) task in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.2 FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la tarea del Servidor Web (HTTP) en el IBM Lotus Domino anterior al 6.5.6 FP2 y el 7.x anterior al 7.0.2 FP2, permite a atacantes remotos autenticados la inyección de secuencias de comandos web o HTML de su elección a través de vectores sin especificar. • http://jvn.jp/jp/JVN%2384565055/index.html http://osvdb.org/39720 http://secunia.com/advisories/27509 http://www-1.ibm.com/support/docview.wss?uid=swg21263871 http://www-1.ibm.com/support/docview.wss?uid=swg27010980 http://www.vupen.com/english/advisories/2007/3700 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •