161 matches found
CVE-2009-5061
Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.14 services for Lotus Domino, when Domino Native Authentication is enabled, might allow remote authenticated users to cause a denial of service daemon crash by going offline, aka SPR MLZG7UPB9N...
CVE-2009-5062
IBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domino on AIX allows remote authenticated users to cause a denial of service daemon crash by subscribing to an Atom feed, aka SPR JRIE7VKMP9...
CVE-2009-5059
Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by checking out a document that is accessed through a connector, aka SPR MMOI7PSR8J...
CVE-2009-5060
Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.11 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by accessing an entry in a calendar, aka SPR MZHA7SEBJX...
CVE-2009-5058
Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.5 services for Lotus Domino allows remote authenticated users to cause a denial of service daemon crash by deleting an item that is accessed through a connector, aka SPR RELS7LARKR...
CVE-2008-7285
Unspecified vulnerability in the docnote string handling implementation in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allows remote attackers to cause a denial of service daemon crash via unknown vectors, aka SPR JFLD7GZT25...
CVE-2008-7284
IBM Lotus Quickr 8.1 before 8100.003 services for Lotus Domino allows remote authenticated users to cause a denial of service daemon crash by clicking a download link, aka SPR QCAO7E6AM8...
Security Bulletin: Content Manager Services for Lotus Quickr (CVE-2016-3092)
Summary IBM Lotus Quickr Connectors bundled in IBM Content Navigator's Collaboration Services is affected by an Apache Commons File Upload vulnerability. IBM Lotus Quickr has resolved this vulnerability Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION:Apache Tomcat is vulnerable to a denial...
Security Bulletin: Apache Commons FileUpload is vulnerable to a denial of service (CVEID: CVE-2014-0050) in IBM Content Manager Services for Lotus Quickr
Summary Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by the improper handling of Content-Type HTTP header for multipart requests. By sending a specially-crafted request, an attacker could exploit this vulnerability to cause the application to enter into an...
IBM Lotus QuickR qp2 ActiveX Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
IBM Lotus Quickr QuickPlace Server 8.0 - Calendar 'Count' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27925/info IBM Lotus Quickr is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
Multiple IBM Products Login Page Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38412/info Multiple IBM products are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
IBM Lotus Quickr ActiveX Stack Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Quickr for Domino. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within an ActiveX...
Lotus Quickr for Domino qp2.dll ActiveX Control Unspecified Stack Overflow
There is an unspecified, stack-based buffer overflow vulnerability in the Lotus Quickr for Domino qp2.dll ActiveX control. By tricking a victim into opening a specially crafted web page, an attacker can leverage this flaw to potentially execute arbitrary code, subject to the user's privileges. C...
IBM Lotus Quickr ActiveX Stack Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Quickr for Domino. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within an ActiveX...
IBM Lotus Quickr for Domino ActiveX控件缓冲区溢出漏洞
BUGTRAQ ID: 65193 CVECAN ID: CVE-2013-6749 IBM Lotus Quickr是一款团队协作软件,能够帮助访问人员、信息和完成任务所需的项目材料。 IBM Lotus Quickr for Domino 8.5.1版本中,qp2.cab内的ActiveX控件存在缓冲区溢出漏洞,可使远程攻击者通过特制的HTML文档,利用此漏洞执行任意代码。 0 IBM Lotus Quickr for Domino 8.5.1 厂商补丁: IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
IBM Lotus Quickr for Domino ActiveX控件缓冲区溢出漏洞
BUGTRAQ ID: 65191 CVECAN ID: CVE-2013-6748 IBM Lotus Quickr是一款团队协作软件,能够帮助访问人员、信息和完成任务所需的项目材料。 IBM Lotus Quickr for Domino 8.5.1版本中,qp2.cab内的ActiveX控件存在缓冲区溢出漏洞,可使远程攻击者通过特制的HTML文档,利用此漏洞执行任意代码。 0 IBM Lotus Quickr for Domino 8.5.1 厂商补丁: IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
CVE-2013-6748
Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6749...
CVE-2013-6749
Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6748...
Buffer overflow
Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6749...