Cross site scripting

Cross-site scripting XSS vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-0834

Cross-site scripting XSS vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-0834

CVE-2008-0834 is a cross-site scripting (XSS) vulnerability in IBM’s Lotus Quickr for i5/OS prior to 8.0.0.2 Hotfix 11. When anonymous access on HTTP ports is disabled, remote attackers can inject arbitrary web script or HTML via unspecified vectors. The incident is documented with a CVSS base sc...

IBM Lotus Domino Web Access Upload Module Buffer Overflow

This module exploits a stack buffer overflow in IBM Lotus Domino Web Access Upload Module. By sending an overly long string to the "GeneralServerName" property located in the dwa7w.dll and the inotes6w.dll control, an attacker may be able to execute arbitrary code. This module requires Metasploit...

Lotus Notes MIF attachment viewer buffer overflow

Added: 01/30/2008 CVE: CVE-2007-5909 BID: 26175 OSVDB: 40791 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the KeyView Viewer included in Lotus Notes allows command execution when a user views a specially crafted Frame Maker Interchange File MIF...

Lotus Notes MIF attachment viewer buffer overflow

Added: 01/30/2008 CVE: CVE-2007-5909 BID: 26175 OSVDB: 40791 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the KeyView Viewer included in Lotus Notes allows command execution when a user views a specially crafted Frame Maker Interchange File MIF...

Lotus Notes MIF attachment viewer buffer overflow

Added: 01/30/2008 CVE: CVE-2007-5909 BID: 26175 OSVDB: 40791 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the KeyView Viewer included in Lotus Notes allows command execution when a user views a specially crafted Frame Maker Interchange File MIF...

Lotus Notes MIF attachment viewer buffer overflow

Added: 01/30/2008 CVE: CVE-2007-5909 BID: 26175 OSVDB: 40791 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the KeyView Viewer included in Lotus Notes allows command execution when a user views a specially crafted Frame Maker Interchange File MIF...

Cross site scripting

Cross-site scripting XSS vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim...

CVE-2008-0354

Cross-site scripting XSS vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim...

CVE-2008-0354

CVE-2008-0354 describes a cross-site scripting (XSS) flaw in the IBM Lotus Sametime Connect Client for Windows (versions 7.5 and 7.5.1). The vulnerability allows a user-assisted attacker to inject arbitrary script/HTML via a crafted chat message, with code execution triggered after a mouseover ev...

CVE-2008-0354

Cross-site scripting XSS vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim...

IBM Lotus Sametime Client Chat消息跨站脚本漏洞

Lotus Sametime是一套企业用的即时通讯应用程序。 Lotus Sametime处理超链接信息存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 提交恶意的超链接在消息中，当用户执行鼠标移动操作就可以触发任意脚本代码执行，导致敏感信息泄漏。 IBM Lotus Sametime 7.5.1 IBM Lotus Sametime 7.5 可参考如下安全公告获得补丁信息： http://www-1.ibm.com/support/docview.wss?uid=swg21292938...

CVE-2008-0243

Unspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a denial of service via unknown vectors...

Code injection

Unspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a denial of service via unknown vectors...

CVE-2008-0243

Unspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a denial of service via unknown vectors...

CVE-2008-0243

CVE-2008-0243 is an unspecified denial-of-service vulnerability in IBM Lotus Domino 7.0.2 before Fix Pack 3. The NVD description notes a DoS via unknown vectors, with CVSS v2 base score 7.8 (HIGH) and network attack vector with no authentication. Connected sources (NVD entry, Tenable/Nessus plugi...

IBM Lotus Domino < 7.0.2 FP3 Unspecified DoS

The version of Lotus Domino on the remote host appears to be older than 7.0.2 FP3. According to IBM, such versions are potentially affected by an unspecified denial of service issue SPR WRAY6WHTCC. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Lotus Domino < 7.0.2 FP3 Unspecified DoS

Binary data 4339.prm...

Lotus Notes WPD attachment viewer buffer overflow

Added: 01/03/2008 CVE: CVE-2007-5910 BID: 26175 OSVDB: 40783 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the KeyView Viewer included in Lotus Notes allows command execution when a user views a specially crafted WordPerfect WPD attachment. Resolution...