CVSS: 7.0EPSS: 0%CPEs: 8EXPL: 0CVE-2013-0522
https://notcve.org/view.php?id=CVE-2013-0522
16 Jul 2018 — The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving an unspecified operating system communication mechanism for password transmission between Windows and Notes. IBM X-Force ID: 82531. La característica Notes Client Single Logon en IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 y 9.0 en Windows permite que usuarios locales descubran contraseñas mediante vectores relacionados co... • https://exchange.xforce.ibmcloud.com/vulnerabilities/82531 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0CVE-2016-2991
https://notcve.org/view.php?id=CVE-2016-2991
01 Dec 2016 — Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Protector for Mail Security 2.8.0.0 through 2.8.1.0 before 2.8.1.0-22115 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Múltiples vulnerabilidades de XSS en IBM Lotus Protector para Mail Security 2.8.0.0 hasta la versión 2.8.1.0 en versiones anteriores a 2.8.1.0-22115 permiten a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especifi... • http://www-01.ibm.com/support/docview.wss?uid=swg21985280 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 20EXPL: 0CVE-2016-0282
https://notcve.org/view.php?id=CVE-2016-0282
24 Nov 2016 — Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS. Vulnerabilidad de XSS en IBM iNotes en versiones anteriores a 8.5.3 FP6 IF2 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, vulnerabilidad también conocida como SPR KLYHAAHNUS. • http://www-01.ibm.com/support/docview.wss?uid=swg21991722 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 15EXPL: 0CVE-2014-6196
https://notcve.org/view.php?id=CVE-2014-6196
26 Nov 2014 — Cross-site scripting (XSS) vulnerability in IBM Web Experience Factory (WEF) 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework (WDF) and Lotus Widget Factory (LWF), allows remote attackers to inject arbitrary web script or HTML by leveraging a Dojo builder error in an unspecified WebSphere Portal configuration, leading to improper construction of a response page by an application. Vulnerabilidad de XSS en IBM Web Experience Factory (WEF) 6.1.5 hasta 8.5.0.1, utilizado en WebSphere Dashboard Fr... • http://secunia.com/advisories/59546 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 2%CPEs: 5EXPL: 0CVE-2014-3086 – JDK: Privilege escalation issue
https://notcve.org/view.php?id=CVE-2014-3086
12 Aug 2014 — Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain privileges by leveraging the ability to execute code in the context of a security manager. Vulnerabilidad no especificada en IBM Java Virtual Machine, utilizado en IBM WebSphere Real Time 3 anterior a Service Refresh 7 FP1 y otros productos, permite a atacantes remotos ganar privilegios mediante el aprovechamiento de la habilidad de ... • http://secunia.com/advisories/59680 • CWE-266: Incorrect Privilege Assignment •
CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0CVE-2014-0913
https://notcve.org/view.php?id=CVE-2014-0913
09 May 2014 — Cross-site scripting (XSS) vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via an e-mail message, aka SPR BFEY9GXHZE. Vulnerabilidad de XSS en IBM iNotes y Domino 8.5.3 FP6 anterior a IF2 y 9.0.1 anterior a FP1 permite a atacantes remotos inyectar secuencias de comandos web y HTML arbitrarios a través de un mensaje de e-mail, también conocido como SPR BFEY9GXHZE. • http://www-01.ibm.com/support/docview.wss?uid=swg21671981 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 1%CPEs: 47EXPL: 0CVE-2014-0892
https://notcve.org/view.php?id=CVE-2014-0892
23 Apr 2014 — IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by leveraging the absence of the NX protection mechanism and placing crafted x86 code on the stack, aka SPR KLYH9GGS9W. IBM Notes y Domino 8.5.x anterior a 8.5.3 FP6 IF3 y 9.x anterior a 9.0.1 FP1 en plataformas de 32-bit de Linux utilizan opciones gcc incorrectas, lo que facilita a atacantes remotos ejecutar código... • http://www-01.ibm.com/support/docview.wss?uid=swg21670264 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0CVE-2014-0884
https://notcve.org/view.php?id=CVE-2014-0884
25 Mar 2014 — Cross-site scripting (XSS) vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en la interfaz de usuario Admin Web en IBM Lotus Protector para Mail Security 2.8.x anterior a 2.8.1-22905 permite a usuarios remotos autenticados inyectar script web o HTML a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg21668124 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2014-0885
https://notcve.org/view.php?id=CVE-2014-0885
25 Mar 2014 — Cross-site request forgery (CSRF) vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Vulnerabilidad de CSRF en la interfaz de usuario Admin Web en IBM Lotus Protector para Mail Security 2.8.x anterior a 2.8.1-22905 permite a usuarios remotos autenticados secuestrar la autenticación de víctimas no especificadas a través de vectores desconocidos. • http://www-01.ibm.com/support/docview.wss?uid=swg21668124 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2014-0886
https://notcve.org/view.php?id=CVE-2014-0886
25 Mar 2014 — The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors. La interfaz de usuario Admin Web en IBM Lotus Protector para Mail Security 2.8.x anterior a 2.8.1-22905 permite a usuarios remotos autenticados evadir restricciones de acceso y ejecutar comandos arbitrarios a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg21668124 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •