Cross site scripting

Cross-site scripting XSS vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49...

Code injection

IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and...

CVE-2013-0127

IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and...

CVE-2013-0127

IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and...

CVE-2013-0538

Cross-site scripting XSS vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49...

CVE-2013-0538

IBM Notes contains a cross-site scripting (XSS) vulnerability (CVE-2013-0538) in Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 that allows remote attackers to inject arbitrary script/HTML via a SCRIPT element in HTML emails. The issue arises from how Notes processes Java/J...

CVE-2013-0127

The CVE-2013-0127 entry applies to IBM Notes (Lotus Notes) 8.x prior to 8.5.3 FP4 Interim Fix 1 and 9.0 prior to Interim Fix 1, where HTML emails could contain APPLET elements that are not blocked. The underlying issue allows remote attackers to bypass Java execution restrictions and X-Confirm-Re...

CVE-2013-0538: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49...

CVE-2013-0127: Undefined Security Weakness

IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and...

Oracle Java SE CVE-2013-1488 Remote Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current process. Technologies Affected Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager Utility...

Oracle Java SE CVE-2013-0431 Remote Java Runtime Environment Vulnerability

Description Oracle Java SE is prone to a remote vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. This issue affects the 'JMX' sub-component. This vulnerability affects the following supported versions: 7 Update 11 and prior Note: This issue wa...

IBM Lotus Notes Web Application XSS Vulnerability - Windows

IBM Lotus Notes is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes Web Application XSS Vulnerability - Linux

IBM Lotus Notes is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes Detection (Mac OS X SSH Login)

Detects the installed version of IBM Lotus Notes. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

IBM Lotus Notes Web Application XSS Vulnerability (Mac OS X)

This host is installed with IBM Lotus Notes and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnoteswebappxssvulnmacosx.nasl 6093 2017-05-10 09:03:18Z teissa $ IBM Lotus Notes Web Application XSS Vulnerability Mac OS X Authors: Rachana Shetty Copyright:...

IBM Lotus Notes URL Command Injection RCE Vulnerability (Windows)

This host is installed with IBM Lotus Notes and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnotesurlcmdinjrcevulnwin.nasl 6074 2017-05-05 09:03:14Z teissa $ IBM Lotus Notes URL Command Injection RCE Vulnerability Windows Authors: Rachana Shetty...

IBM Lotus Notes Web Application XSS Vulnerability (Linux)

This host is installed with IBM Lotus Notes and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnoteswebappxssvulnlin.nasl 6125 2017-05-15 09:03:42Z teissa $ IBM Lotus Notes Web Application XSS Vulnerability Linux Authors: Rachana Shetty Copyright:...

IBM Lotus Notes Web Application XSS Vulnerability - Mac OS X

IBM Lotus Notes is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes URL Command Injection RCE Vulnerability - Windows

IBM Lotus Notes is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Notes Web Application XSS Vulnerability (Windows)

This host is installed with IBM Lotus Notes and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnoteswebappxssvulnwin.nasl 6074 2017-05-05 09:03:14Z teissa $ IBM Lotus Notes Web Application XSS Vulnerability Windows Authors: Rachana Shetty Copyright:...