CVE-2013-0127

The CVE-2013-0127 entry applies to IBM Notes (Lotus Notes) 8.x prior to 8.5.3 FP4 Interim Fix 1 and 9.0 prior to Interim Fix 1, where HTML emails could contain APPLET elements that are not blocked. The underlying issue allows remote attackers to bypass Java execution restrictions and X-Confirm-Re...

CVE-2013-0538

IBM Notes contains a cross-site scripting (XSS) vulnerability (CVE-2013-0538) in Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 that allows remote attackers to inject arbitrary script/HTML via a SCRIPT element in HTML emails. The issue arises from how Notes processes Java/J...

BF and IA vulnerabilities in IBM Lotus Domino

Hello 3APA3A! I want to warn you about Brute Force and Insufficient Authentication vulnerabilities in IBM Lotus Domino. These are vulnerabilities in Domino, which I've found at 03.05.2012 together with other holes. Last year I've announced multiple vulnerabilities in IBM software and after IBM...

IBM Lotus Domino information leakage

Unprivileged user can access system information...

IBM Lotus Domino 8.5.x Multiple Vulnerabilities

According to its banner, the version of Lotus Domino on the remote host is 8.5.x and is, therefore, affected by the following vulnerabilities : - Some scripts inside the Web Help application are vulnerable to open redirect attacks. CVE-2012-2159 - The Web Help component contains a reflected...

IBM Lotus Domino 8.5.x < 8.5.3 Multiple Vulnerabilities

According to its banner, the version of Lotus Domino on the remote host is 8.5.x prior to 8.5.3, and is, therefore, affected by the following vulnerabilities : - A heap-based buffer overflow error exists in the file ndiiop.exe related to the DIIOP implementation and GIOP request handling...

CVE-2013-0503

Cross-site scripting XSS vulnerability in the Bookmarks component in IBM Lotus Connections before 4.0 CR3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Bookmarks component in IBM Lotus Connections before 4.0 CR3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0503

The vulnerability (CVE-2013-0503) affects IBM Lotus Connections, Bookmarks component, and is a cross‑site scripting (XSS) flaw. It exists in versions prior to 4.0 CR3. The exploitation path is described as via unspecified vectors. In practice, the impact is arbitrary script/HTML execution in the ...

CVE-2013-0503

Cross-site scripting XSS vulnerability in the Bookmarks component in IBM Lotus Connections before 4.0 CR3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

IBM Lotus Domino crossite scripting

Crossite scripting and response splutting...

Multiple XSS vulnerabilities in IBM Lotus Domino

Hello 3APA3A! I want to warn you about multiple Cross-Site Scripting vulnerabilities in IBM Lotus Domino. Last year I've announced multiple vulnerabilities in IBM software and after IBM fixed many of them, I've disclosed them. These are new vulnerabilities in Domino, which I've found at 03.05.201...

Lotus Domino vulnerable to denial-of-service (DoS)

Overview Lotus Domino provided by IBM contains a denial-of-service DoS vulnerability. Lotus Domino contains a denial-of-service DoS vulnerability due to an issue in processing HTTP requests. Ryouichi Ozawa of Oki Electric Industry Co., Ltd reported this vulnerability to IPA. JPCERT/CC coordinated...

JVN#51305555: Lotus Domino vulnerable to denial-of-service (DoS)

Lotus Domino contains a denial-of-service DoS vulnerability due to an issue in processing HTTP requests. Impact A remote attacker may cause the Domino service to crash. Solution Update the software Update to the latest version according to the information provided by the developer. Products...

Lotus Domino 8.5.4 Cross Site Scripting

Hello list! I want to warn you about multiple Cross-Site Scripting vulnerabilities in IBM Lotus Domino. Last year I've announced multiple vulnerabilities in IBM software and after IBM fixed many of them, I've disclosed them. These are new vulnerabilities in Domino, which I've found at 03.05.2012...

IBM Lotus Domino HTTP Server Multiple Vulnerabilities

Lotus Domino HTTP Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:lotusdomino";...

IBM Lotus Domino Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications...

IBM Lotus Domino 8.5.x - x.nsf Multiple Cross-Site Scripting Vulnerabilities

IBM Lotus Domino 8.5.x - x.nsf Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/58715/info IBM Lotus Domino is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

IBM Lotus Domino 8.5.x - 'x.nsf' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58715/info IBM Lotus Domino is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

Oracle Java SE CVE-2013-1488 Remote Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current process. Technologies Affected Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager Utility...