Code injection

Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5...

Code injection

Unspecified vulnerability in IBM Lotus iNotes aka Domino Web Access or DWA before 229.131 for Domino 8.0.x has unknown impact and attack vectors, aka SPR SDOY7RHBNH...

Input validation

IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU...

Design/Logic Flaw

Ultra-light Mode in IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the status-alerts URL, which has unspecified impact and attack vectors, aka SPR LSHR7TBM58...

CVE-2010-0276

Technical details about CVE-2010-0276 are not publicly available in the provided connected documents. The records describe the issue in IBM Lotus iNotes with an unspecified impact and attack vectors; no concrete vulnerability specifics are present. Monitor for updates.

CVE-2010-0274

Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5...

CVE-2010-0275

Ultra-light Mode in IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the status-alerts URL, which has unspecified impact and attack vectors, aka SPR LSHR7TBM58...

CVE-2009-4594

Unspecified vulnerability in IBM Lotus iNotes aka Domino Web Access or DWA before 229.131 for Domino 8.0.x has unknown impact and attack vectors, aka SPR SDOY7RHBNH...

CVE-2010-0274

Technical details for CVE-2010-0274 are not publicly available in the provided documents. Monitor for updates.

CVE-2010-0275

CVE-2010-0275 affects IBM Lotus iNotes (Domino Web Access) prior to 229.241 on Domino 8.0.2 FP3, where the status-alerts URL script handling is faulty. The issue stems from improper handling of script commands, with unspecified impact and attack vectors per the description. The NVD entry lists a ...

CVE-2009-4594

Technical details for CVE-2009-4594 are not publicly available in the provided documents. Monitor for updates; the supplied data does not specify affected products, impact, exploitation, or remediation.

CVE-2010-0276

IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Lotus iNotes aka Domino Web Access or DWA before 211.241 for Domino 8.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR EZEL7UURYC...

CVE-2009-3105

Cross-site scripting XSS vulnerability in IBM Lotus iNotes aka Domino Web Access or DWA before 211.241 for Domino 8.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR EZEL7UURYC...

CVE-2009-3105

Cross-site scripting XSS vulnerability in IBM Lotus iNotes aka Domino Web Access or DWA before 211.241 for Domino 8.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR EZEL7UURYC...

CVE-2009-3105

CVE-2009-3105 is an XSS vulnerability in IBM Lotus iNotes (Domino Web Access) prior to 211.241 for Domino 8.0.1. It allows remote attackers to inject arbitrary web script or HTML via unspecified vectors (SPR EZEL7UURYC). The NVD entry lists a Medium severity (CVSS v2: AV:N/AC:M/Au:N/C:N/I:P/A:N) ...

Cross site scripting

Cross-site scripting XSS vulnerability in Lotus Domino iNotes Client 6.5.4 allows remote attackers to inject arbitrary web script or HTML via email with attached html files, which are directly rendered in the browser...

CVE-2006-0663

Multiple cross-site scripting XSS vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers to inject arbitrary web script or HTML via 1 an email subject; 2 an encoded javascript URI, as demonstrated using "javascript:"; or 3 when the Domino Web Access ActiveX control is...

CVE-2006-0662

Cross-site scripting XSS vulnerability in Lotus Domino iNotes Client 6.5.4 allows remote attackers to inject arbitrary web script or HTML via email with attached html files, which are directly rendered in the browser...

CVE-2006-0662

CVE-2006-0662 affects Lotus Domino iNotes Client 6.5.4. The vulnerability is a cross-site scripting (XSS) flaw where email messages containing HTML attachments are rendered directly in the browser, allowing an attacker to inject arbitrary script or HTML. The NVD entry confirms the basic descripti...