27 results (0.004 seconds)

CVSS: 9.3EPSS: 0%CPEs: 10EXPL: 0

CVE-2012-6277

https://notcve.org/view.php?id=CVE-2012-6277

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention (DLP) before 11.6.1, IBM Notes 8.5.x, IBM Lotus Domino 8.5.x before 8.5.3 FP4, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, related to "a number of underlying issues" in which "some of these cases demonstrated memory corruption with attacker-controlled input and could be exploited to run arbitrary code." Múltiples vulnerabilidades no especificadas en Autonomy KeyView IDOL versiones anteriores a 10.16, como es usado en Symantec Mail Security para Microsoft Exchange versiones anteriores a 6.5.8, Symantec Mail Security para Domino versiones anteriores a 8.1.1, Symantec Messaging Gateway versiones anteriores a 10.0.1, Symantec Data Loss Prevention (DLP) versiones anteriores a 11.6.1, IBM Notes versiones 8.5.x, IBM Lotus Domino versiones 8.5.x anteriores a 8.5.3 FP4, y otros productos, permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) por medio de un archivo diseñado, relacionado con "una serie de problemas subyacentes" en los que "algunos de estos casos demostraron corrupción de la memoria con una entrada controlada por el atacante y podrían ser explotados para ejecutar código arbitrario". • https://support.symantec.com/us/en/article.symsa1262.html https://tools.cisco.com/security/center/viewAlert.x?alertId=27482 https://vulmon.com/vulnerabilitydetails?qid=CVE-2012-6277 https://www.energy.gov/cio/articles/v-118-ibm-lotus-domino-multiple-vulnerabilities https://www.ibm.com/blogs/psirt/security-bulletin-security-vulnerabilities-addressed-in-ibm-notes-9-0-cve-2011-3026-cve-2012-6349-cve-2012-6277 https://www.kb.cert.org/vuls/id/849841 https://www.securityfocus.com/bid/56610 https&# •

CVSS: 7.0EPSS: 0%CPEs: 8EXPL: 0

CVE-2013-0522

https://notcve.org/view.php?id=CVE-2013-0522

The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving an unspecified operating system communication mechanism for password transmission between Windows and Notes. IBM X-Force ID: 82531. La característica Notes Client Single Logon en IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 y 9.0 en Windows permite que usuarios locales descubran contraseñas mediante vectores relacionados con un mecanismo de comunicación de un sistema operativo no especificado para la transmisión de contraseñas entre Windows y Notes. IBM X-Force ID: 82531. • https://exchange.xforce.ibmcloud.com/vulnerabilities/82531 https://www-01.ibm.com/support/docview.wss?uid=swg21634508 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 9.3EPSS: 0%CPEs: 11EXPL: 0

CVE-2018-1437

https://notcve.org/view.php?id=CVE-2018-1437

IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565. IBM Notes 8.5 y 9.0 podría permitir que un atacante ejecute código arbitrario en el sistema. Esto ha sido provocado por un error relacionado con múltiples rutas de búsqueda no fiables. • http://www.ibm.com/support/docview.wss?uid=swg22014201 http://www.securityfocus.com/bid/103401 http://www.securitytracker.com/id/1040563 https://exchange.xforce.ibmcloud.com/vulnerabilities/139565 • CWE-426: Untrusted Search Path •

CVSS: 7.8EPSS: 1%CPEs: 11EXPL: 0

CVE-2018-1435

https://notcve.org/view.php?id=CVE-2018-1435

IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a malicious executable in an attacker-controlled directory, which could result in code execution. IBM X-Force ID: 139563. IBM Notes 8.5 y 9.0 es vulnerable a un ataque de secuestro de DLL. Un atacante remoto podría engañar a un usuario para que haga doble clic sobre un ejecutable malicioso en un directorio controlado por el atacante, lo que podría resultar en la ejecución de código. • http://www.ibm.com/support/docview.wss?uid=swg22014198 http://www.securityfocus.com/bid/103404 http://www.securitytracker.com/id/1040563 https://exchange.xforce.ibmcloud.com/vulnerabilities/139563 • CWE-426: Untrusted Search Path •

CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0

CVE-2017-1711

https://notcve.org/view.php?id=CVE-2017-1711

IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory. IBM X-Force ID: 134532. Las versiones 8.5 y 9.0 de IBM iNotes SUService pueden manipularse para que ejecuten código malicioso de un DLL disfrazado de DLL de windows en el directorio temp. IBM X-Force ID: 134532. • http://www.ibm.com/support/docview.wss?uid=swg22010774 http://www.ibm.com/support/docview.wss?uid=swg22010775 https://exchange.xforce.ibmcloud.com/vulnerabilities/134532 • CWE-426: Untrusted Search Path •