3413 matches found
CVE-2020-4080
HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the security...
CVE-2020-4080
HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the security...
Cross site scripting
HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the security...
CVE-2020-14224
A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the Notes application or inject code into the system which would execute with the...
CVE-2020-14224
CVE-2020-14224 describes a stack buffer overflow in the MIME message handling of the HCL Notes v9 client. The vulnerability can be exploited by an unauthenticated, remote attacker to crash Notes or inject code that runs with the privileges of the current user. Public metrics indicate a critical i...
CVE-2020-14271
HCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the...
CVE-2020-14271
CVE-2020-14271 affects HCL iNotes v9, v10 and v11. The stored XSS occurs due to improper handling of message content, allowing an unauthenticated remote attacker to craft markup that executes script in the victim’s browser within the hosting site’s security context and potentially steal cookie-ba...
CVE-2020-4080
The CVE-2020-4080 entry concerns HCL Verse v10 and v11 with a Stored Cross-Site Scripting (XSS) flaw due to improper handling of message content. Multiple connected sources (Red Hat, CNVD, CVE lists) confirm the vulnerability exists in HCL Verse v10/v11 and describe an unauthenticated remote atta...
CVE-2020-4080
HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting XSS vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the security...
CVE-2020-14232
A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the privileges of the...
CVE-2020-14232
A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the privileges of the...
Stack overflow
A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the privileges of the...
HCL Verse 跨站脚本漏洞
HCL Verse is a mobile application for accessing emails and life plan management from HCL India. A cross-site scripting vulnerability exists in HCL Verse v10 and v11, which stems from mishandling of message content and is susceptible to stored cross-site scripting attacks XSS. A remote attacker...
HCL iNotes 跨站脚本漏洞
HCL iNotes is a browsing client for accessing HCLDomino mail, contacts, calendar, scheduling and collaboration features. A stored cross-site scripting vulnerability exists in HCL iNotes 9, 10, and 11. The vulnerability stems from improper handling of message content. An attacker can exploit this...
HCL Domino Access Control Error Vulnerability
HCL Domino is a suite of enterprise-class application development platforms from HCL India. An Access Control Error vulnerability exists in HCL Domino, which can be exploited by an attacker to bypass access restrictions to data via XPages in HCL Domino in order to gain access to sensitive...
HCL Notes Stack Buffer Overflow Vulnerability
HCL Notes is a local email client from HCL India. A stack buffer overflow vulnerability exists in the handling of input parameters in HCL Notes v9. An attacker can exploit this vulnerability to cause the program to crash or inject code into the system that will execute with the privileges of the...
CVE-2020-14232
A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the privileges of the...
CVE-2020-14232
CVE-2020-14232 concerns HCL Notes v9 where the vulnerability arises from input parameter handling, leading to a stack buffer overflow. An authenticated attacker could crash the application or inject code executing with the privileges of the currently logged-in user. Affected component is the inpu...
Hcl Technologies Domino 安全漏洞
HCL Domino is a suite of enterprise-class application development platforms from HCL India. An Access Control Error vulnerability exists in HCL Domino, which can be exploited by an attacker to bypass access restrictions to data via XPages in HCL Domino in order to gain access to sensitive...
HCL Notes 安全漏洞
HCL Notes is a local email client from HCL India. A stack buffer overflow vulnerability exists in the handling of input parameters in HCL Notes v9. An attacker can exploit this vulnerability to cause the program to crash or inject code into the system that will execute with the privileges of the...