CVSS: 9.8EPSS: 1%CPEs: 39EXPL: 0CVE-2022-44755 – HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView
https://notcve.org/view.php?id=CVE-2022-44755
17 Dec 2022 — HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44751. This vulnerability applies to software previously licensed by IBM. HCL Notes es susceptible a una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en lasr.dll en Micro Focu... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100260 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 2%CPEs: 39EXPL: 0CVE-2022-44753 – HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView
https://notcve.org/view.php?id=CVE-2022-44753
17 Dec 2022 — HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted WordPerfect file. This vulnerability applies to software previously licensed by IBM. HCL Notes es susceptible a una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en wp6sr.dll en Micro Focus KeyView. Esto podría permitir que un atacante remoto no autenticado ... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100260 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 2%CPEs: 39EXPL: 0CVE-2022-44751 – HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView
https://notcve.org/view.php?id=CVE-2022-44751
17 Dec 2022 — HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44755. This vulnerability applies to software previously licensed by IBM. HCL Notes es susceptible a una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en lasr.dll en Micro Focu... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100260 • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 1%CPEs: 2EXPL: 0CVE-2020-14224
https://notcve.org/view.php?id=CVE-2020-14224
18 Dec 2020 — A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the Notes application or inject code into the system which would execute with the privileges of the currently logged-in user. Una vulnerabilidad en el manejo de mensajes MIME del cliente HCL Notes versión v9, podría potencialmente ser explotada por un atacante no autenticado, resultando en un de... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085913 • CWE-787: Out-of-bounds Write •
CVSS: 9.0EPSS: 0%CPEs: 10EXPL: 0CVE-2020-14232
https://notcve.org/view.php?id=CVE-2020-14232
17 Dec 2020 — A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the privileges of the currently logged in user. Una vulnerabilidad en el manejo del parámetro de entrada de HCL Notes versión v9, podría ser explotada potencialmente por un atacante autenticado, resultando en un desbordamiento del búfer de la ... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085883 •
CVSS: 10.0EPSS: 1%CPEs: 35EXPL: 0CVE-2020-14268
https://notcve.org/view.php?id=CVE-2020-14268
14 Dec 2020 — A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which would execute with the privileges of the client. Una vulnerabilidad en el manejo de mensajes MIME del cliente Notes (versiones 9 y 10), podría potencialmente ser explotada por un atacante no autenticado, resultando en un desbordamiento... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085762 • CWE-787: Out-of-bounds Write •
CVSS: 7.2EPSS: 0%CPEs: 10EXPL: 0CVE-2020-4102
https://notcve.org/view.php?id=CVE-2020-4102
02 Dec 2020 — HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Notes or execute attacker-controlled code on the client system. HCL Notes es susceptible a una vulnerabilidad de Desbordamiento de Búfer en DXL debido a una comprobación inapropiada de la entrada de usuario. Una explotación con éxito podría permitir a un atacante bloquear Notes o ejecutar código controlado por el atacante en el sistema clien... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085499 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2020-14258
https://notcve.org/view.php?id=CVE-2020-14258
21 Nov 2020 — HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the client. Versions 9, 10 and 11 are affected. HCL Notes es susceptible a una vulnerabilidad de Denegación de Servicio causada por una comprobación inapropiada de la entrada suministrada por el usuario. Un atacante remoto no autenticado podría explotar esta vulnerabilidad us... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085304 • CWE-20: Improper Input Validation •
CVSS: 6.8EPSS: 0%CPEs: 40EXPL: 0CVE-2020-4097
https://notcve.org/view.php?id=CVE-2020-4097
05 Nov 2020 — In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a buffer overflow. This could enable an attacker to crash HCL Notes or execute attacker-controlled code on the client. En HCL Notes versión 9 anterior a la versión 9.0.1 FixPack 10 Interim Fix 8, versión 10 anterior a... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084796 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 6.1EPSS: 0%CPEs: 36EXPL: 0CVE-2020-14240
https://notcve.org/view.php?id=CVE-2020-14240
05 Nov 2020 — HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials. HCL Notes versiones anteriores a 9.0.1 FP10 IF8, 10.0.1 FP6 y 11.0.1 FP1, son susceptibles a una vulnerabilidad de tipo Cross-site Scripting (XSS) almacenado... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084789 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •