CVE-2010-4548: Improper Input Validation

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service daemon crash by accepting a meeting invitation with an iNotes client and then accepting this meeting invitation with an iPhone client...

CVE-2010-4553: Improper Input Validation

An unspecified Domino API in IBM Lotus Notes Traveler before 8.5.1.1 does not properly handle MIME types, which allows remote attackers to cause a denial of service daemon crash via unspecified vectors...

CVE-2010-4551: Undefined Security Weakness

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by omitting the Internet ID field in the person document, and then using an Apple device to 1 accept or 2 decline an invitation...

CVE-2010-4550: Improper Input Validation

IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to cause a denial of service sync failure via a malformed document...

CVE-2009-5035: Exposure of Sensitive Information to an Unauthorized Actor

The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages...

CVE-2010-4545: Undefined Security Weakness

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service resource consumption and sync outage by syncing a large volume of data...

CVE-2010-4544: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the servlet in IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2010-1825

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.0.2 Description The issue allows remote authenticated users to cause a denial of service, resulting in memory consumption and daemon crash, by syncing a large volume of data. This is related to th...

PT-2010-5526

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations For version...

PT-2010-1826

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.0.2 Description The issue arises from the Nokia client in IBM Lotus Notes Traveler not properly handling multiple outgoing e-mail messages between sync operations. This could potentially allow...

CVE-2009-5034: Undefined Security Weakness

IBM Lotus Notes Traveler before 8.5.0.2 allows remote authenticated users to cause a denial of service memory consumption and daemon crash by syncing a large volume of data, related to the launch of a new process to handle the data while the previous process is still operating on the data...

PT-2010-5529

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.1.3 Description The issue allows remote authenticated users to bypass intended access restrictions by using credentials from a different domain, due to improper application of policy documents to...

ZDI-10-157: IBM Lotus Notes Autonomy KeyView Office Shape Parsing Remote Code Execution Vulnerability

ZDI-10-157: IBM Lotus Notes Autonomy KeyView Office Shape Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-157 August 23, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM Autonomy -- Affected Products: IBM Lotus Notes Autonomy...

ZDI-10-159: IBM Lotus Notes Autonomy KeyView WK3 Parsing Remote Code Execution Vulnerability

ZDI-10-159: IBM Lotus Notes Autonomy KeyView WK3 Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-159 August 23, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM Autonomy -- Affected Products: IBM Lotus Notes Autonomy KeyView --...

ZDI-10-158: IBM Lotus Notes Autonomy KeyView WK3 Parsing Remote Code Execution Vulnerability

ZDI-10-158: IBM Lotus Notes Autonomy KeyView WK3 Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-158 August 23, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM Autonomy -- Affected Products: IBM Lotus Notes Autonomy KeyView --...

ZDI-10-156: IBM Lotus Notes Autonomy KeyView Word Parsing Remote Code Execution Vulnerability

ZDI-10-156: IBM Lotus Notes Autonomy KeyView Word Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-156 August 23, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM Autonomy -- Affected Products: IBM Lotus Notes Autonomy KeyView --...

IBM Lotus Notes Autonomy KeyView Office Shape Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Notes Email Client. User interaction is required to exploit this vulnerability in that the target must open a malicious email attachment. The specific flaw exists within the Lotus Notes...

IBM Lotus Notes Autonomy KeyView Word Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Notes Email Client. User interaction is required to exploit this vulnerability in that the target must open a malicious email attachment. The specific flaw exists within the Lotus Notes...

IBM Lotus Notes Autonomy KeyView WK3 Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Notes Email Client. User interaction is required to exploit this vulnerability in that the target must open a malicious email attachment. The specific flaw exists within the Lotus Notes...

IBM Lotus Notes Autonomy KeyView WK3 Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Notes Email Client. User interaction is required to exploit this vulnerability in that the target must open a malicious email attachment. The specific flaw exists within the Lotus Notes...