676 matches found
Code injection
IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and...
CVE-2013-0127
IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and...
CVE-2013-0127
IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and...
CVE-2013-0538
Cross-site scripting XSS vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49...
CVE-2013-0538
IBM Notes contains a cross-site scripting (XSS) vulnerability (CVE-2013-0538) in Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 that allows remote attackers to inject arbitrary script/HTML via a SCRIPT element in HTML emails. The issue arises from how Notes processes Java/J...
CVE-2013-0127
The CVE-2013-0127 entry applies to IBM Notes (Lotus Notes) 8.x prior to 8.5.3 FP4 Interim Fix 1 and 9.0 prior to Interim Fix 1, where HTML emails could contain APPLET elements that are not blocked. The underlying issue allows remote attackers to bypass Java execution restrictions and X-Confirm-Re...
Oracle Java SE CVE-2013-1488 Remote Code Execution Vulnerability
Description Oracle Java SE is prone to a remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current process. Technologies Affected Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager Utility...
Oracle Java SE CVE-2013-0431 Remote Java Runtime Environment Vulnerability
Description Oracle Java SE is prone to a remote vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. This issue affects the 'JMX' sub-component. This vulnerability affects the following supported versions: 7 Update 11 and prior Note: This issue wa...
IBM Lotus Notes Web Application XSS Vulnerability (Mac OS X)
This host is installed with IBM Lotus Notes and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnoteswebappxssvulnmacosx.nasl 6093 2017-05-10 09:03:18Z teissa $ IBM Lotus Notes Web Application XSS Vulnerability Mac OS X Authors: Rachana Shetty Copyright:...
IBM Lotus Notes Web Application XSS Vulnerability - Linux
IBM Lotus Notes is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM Lotus Notes Web Application XSS Vulnerability - Windows
IBM Lotus Notes is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM Lotus Notes Detection (Mac OS X SSH Login)
Detects the installed version of IBM Lotus Notes. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
IBM Lotus Notes URL Command Injection RCE Vulnerability (Windows)
This host is installed with IBM Lotus Notes and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnotesurlcmdinjrcevulnwin.nasl 6074 2017-05-05 09:03:14Z teissa $ IBM Lotus Notes URL Command Injection RCE Vulnerability Windows Authors: Rachana Shetty...
IBM Lotus Notes Web Application XSS Vulnerability (Linux)
This host is installed with IBM Lotus Notes and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnoteswebappxssvulnlin.nasl 6125 2017-05-15 09:03:42Z teissa $ IBM Lotus Notes Web Application XSS Vulnerability Linux Authors: Rachana Shetty Copyright:...
IBM Lotus Notes Web Application XSS Vulnerability (Windows)
This host is installed with IBM Lotus Notes and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmlotusnoteswebappxssvulnwin.nasl 6074 2017-05-05 09:03:14Z teissa $ IBM Lotus Notes Web Application XSS Vulnerability Windows Authors: Rachana Shetty Copyright:...
IBM Lotus Notes Web Application XSS Vulnerability - Mac OS X
IBM Lotus Notes is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM Lotus Notes URL Command Injection RCE Vulnerability - Windows
IBM Lotus Notes is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics...
