IBM Lotus Domino 6.x/7.0 iNotes Email Subject XSS

No description provided by source. source: http://www.securityfocus.com/bid/16577/info IBM Lotus Domino iNotes is prone to multiple HTML- and script-injection vulnerabilities. These vulnerabilities can allow attackers to carry out a variety of attacks, including theft of cookie-based authenticati...

IBM Domino 9.0.0 < 9.0.0 Interim Fix 4 iNotes Buffer Overflow (credentialed check)

The remote host has a version of IBM Domino formerly Lotus Domino 9.0.0 prior to 9.0.0 Interim Fix 4 IF4 , and thus is affected by a buffer overflow error in the iNotes component that could allow an authenticated user to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"...

IBM Domino 9.0 < 9.0.0 Interim Fix 4 iNotes Buffer Overflow

According to its banner, the version of IBM Domino formerly IBM Lotus Domino on the remote host is 9.0 prior to 9.0.0 Interim Fix 4 IF4, and thus is affected by a buffer overflow error in the iNotes component that could allow an authenticated user to execute arbitrary code. %NASLMINLEVEL 70300 C...

IBM Domino 8.5.3 < 8.5.3 Fix Pack 5 Interim Fix 1 iNotes Buffer Overflow (credentialed check)

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.3 prior to 8.5.3 Fix Pack 5 FP5 Interim Fix 1 IF1, and thus is affected by a buffer overflow error in the iNotes component that could allow an authenticated user to execute arbitrary code. C Tenable Network Security, Inc...

IBM Domino 8.5.3 FP6 / 9.0.1 < 8.5.3 FP6 IF2 / 9.0.1 FP1 iNotes XSS

According to its banner, the version of IBM Domino formerly IBM Lotus Domino on the remote host is 8.5.3 Fix Pack 6 FP6 prior to 8.5.3 Fix Pack 6 FP6 Interim Fix 2 IF2 or 9.0.1 prior to 9.0.1 Fix Pack 1 FP1, and thus is affected by an unspecified error that could allow cross-site scripting XSS...

CVE-2014-0913

Cross-site scripting XSS vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via an e-mail message, aka SPR BFEY9GXHZE...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via an e-mail message, aka SPR BFEY9GXHZE...

CVE-2014-0913

Cross-site scripting XSS vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via an e-mail message, aka SPR BFEY9GXHZE...

CVE-2014-0913

CVE-2014-0913 affects IBM Domino and IBM iNotes. The vulnerability is a cross-site scripting (XSS) issue that enables remote attackers to inject arbitrary web script or HTML via an email message in IBM Domino/iNotes versions affected (8.5.3 FP6 before IF2 and 9.0.1 before FP1). The root cause det...

CVE-2014-0913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM iNotes and Domino 8.5.3 FP6 before IF2 and 9.0.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via an e-mail message, aka SPR BFEY9GXHZE...

IBM Domino 8.5.x < 8.5.3 FP6 iNotes Multiple XSS (uncredentialed check)

According to its banner, the version of IBM Domino formerly IBM Lotus Domino on the remote host is 8.5.x prior to 8.5.3 FP6. It is, therefore, affected by the following iNotes-related cross-site scripting vulnerabilities : - An input validation error exists related to handling content in email...

IBM Domino 9.x < 9.0.1 Multiple Vulnerabilities (uncredentialed check)

According to its banner, the version of IBM Domino formerly IBM Lotus Domino on the remote host is 9.x earlier than 9.0.1. It is, therefore, affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of IBM JRE that contains numerous security issues...

IBM Domino 8.5.x < 8.5.3 FP6 iNotes Multiple XSS (credentialed check)

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 6 installed. It is, therefore, reportedly affected by the following iNotes-related cross-site scripting vulnerabilities : - An input validation error exists related to handling content in email message...

CVE-2013-4064

Cross-site scripting XSS vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9ARMFA...

CVE-2013-4063

Cross-site scripting XSS vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPRs PTHN9AQMV7 and TCLE98ZKRP...

Cross site scripting

Cross-site scripting XSS vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9ARMFA...

Cross site scripting

Cross-site scripting XSS vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPRs PTHN9AQMV7 and TCLE98ZKRP...

Cross site scripting

Cross-site scripting XSS vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPR TCLE98ZKRP...

CVE-2013-4063

CVE-2013-4063 is an XSS vulnerability in IBM Domino’s iNotes affecting IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1. The issue allows remote attackers to inject arbitrary script/HTML via active content in an e-mail message. Connected entries confirm the same CVE family (CVE-2013-4063)...

CVE-2013-4064

CVE-2013-4064 is an XSS vulnerability affecting IBM Domino iNotes when ultra-light mode is enabled. The NVD entry specifies affected versions as IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, with the flaw exploitable by remote authenticated users via unspecified vectors. The descripti...