2465 matches found
CVE-2002-1624
Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters...
CVE-2004-1621
IBM Lotus Notes and IBM Domino (Notes/Domino versions prior to R6) are affected by a cross-site scripting (XSS) vulnerability involving square brackets at the beginning and end of fields computed for display, computed when composed, or computed text element fields. The vendor has disputed that No...
CVE-2004-1621
NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of 1 computed for display, 2...
Lotus Domino Address Book Information Disclosure
Binary data 2567.prm...
Lotus Domino Default Administration Database Detection
Binary data 2489.prm...
CVE-2004-2369
Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. dot dot in the directory creation command...
CVE-2004-2667
Cross-site scripting XSS vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...
CVE-2004-2281
Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by 1 KSPR5YS6GR and 2 KSPR62F4D3...
CVE-2004-2311
Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or determine the existence of files via a .. dot dot in the new folder dialog...
CVE-2004-2310
Cross-site scripting XSS vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console...
CVE-2004-2280
Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service crash via unknown vectors related to Java applets, as identified by KSPR62F4KN...
CVE-2004-0480
Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe...
IBM Lotus Notes/Domino Square Brackets Encoding Failure XSS
The remote server is vulnerable to cross-site scripting, when requesting a .nsf file with html arguments, as in : GET /FormReflectingURLValue?OpenForm&Field=XSS %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid15514...
CVE-2004-1621
NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of 1 computed for display, 2...
PT-2004-2528 · Ibm · Ibm Domino +1
Name of the Vulnerable Software and Affected Versions: IBM Lotus Notes versions prior to R6 IBM Domino versions prior to R6 Description: A cross-site scripting XSS issue allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of computed for...
IBM Lotus Domino 6.x - Cross-Site Scripting HTML Injection
IBM Lotus Domino 6.x - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/11458/info It is reported that Lotus Domino is susceptible to a cross-site scripting and an HTML injection vulnerability. These issues are due to a failure of the application to properly sanitize...
CVE-2000-1203
Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service CPU consumption by forging an email message with the sender as [email protected] localhost, which causes Domino to enter a mail loop...
CVE-2003-0123
CVE-2003-0123 concerns a buffer overflow in Lotus Notes/Domino Web Retriever (R4.5–R6). A remote attacker sending an overly long HTTP status line can crash the Web Retriever, causing a denial of service on the server or client depending on the setup. Public sources from Rapid7 (R7-0011) detail af...
CVE-2000-1203
The CVE-2000-1203 vulnerability affects Lotus Domino SMTP server versions 4.63–5.08. A remote attacker can trigger a denial-of-service (CPU consumption) by forging an email with the sender set to bounce@[127.0.0.1] (localhost), causing Domino to enter a mail loop. The available sources describe a...