759 matches found
CVE-2008-0354: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim...
Cross site scripting
Cross-site scripting XSS vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI...
CVE-2007-6295
Cross-site scripting XSS vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI...
CVE-2007-6295
Cross-site scripting XSS vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI...
CVE-2007-6295
The documents confirm CVE-2007-6295 is an XSS vulnerability in IBM Lotus Sametime prior to version 8.0, affecting the WebRunMenuFrame page of the online meeting center template. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the URI, with attack vector over n...
CVE-2007-6295: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI...
CVE-2007-4142
Cross-site scripting XSS vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a crafted Sametime meeting...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a crafted Sametime meeting...
CVE-2007-4142
CVE-2007-4142 describes a cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731, where remote attackers can inject arbitrary web script or HTML via unspecified vectors involving a crafted Sametime meeting. Public references (IBM support note, advisories, and ...
CVE-2007-4142
Cross-site scripting XSS vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a crafted Sametime meeting...
CVE-2007-4142: Undefined Security Weakness
Cross-site scripting XSS vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a crafted Sametime meeting...
IBM Lotus SameTime STJNILoader.OCX ActiveX控件LoadLibrary输入验证漏洞
IBM Corp.'s Lotus Sametime产品提供实时在线会议解决方案。 IBM Corp.'s Lotus Sametime产品包含的STJNILoader.ocx组件存在输入验证问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 此控件使用如下的CLASSID： 7261EE42-318E-490A-AE8F-77649DBA1ECA and 0B9C9C7D-ED81-4594-AFCB-FC5588125382 此控件一般标记为安全脚本，并导出的LoadLibrary函数没有过滤输入，构建恶意WEB页，诱使用户访问，可导致以应用程序进程权限执行任意指令。 IB...
CVE-2007-1784
The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...
Code injection
The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...
CVE-2007-1784
The CVE-2007-1784 entry affects IBM Lotus Notes Sametime (JNILoader ActiveX: STJNILoader.ocx, version 3.1.0.26) where remote attackers can cause arbitrary code execution by passing arbitrary arguments to the loadLibrary function, enabling loading of arbitrary DLLs. Impact is described as remote c...
CVE-2007-1784
The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...
CVE-2007-1784: Undefined Security Weakness
The JNILoader ActiveX control STJNILoader.ocx 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function...
iDefense Security Advisory 03.29.07: IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability
IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability iDefense Security Advisory 03.29.07 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 29, 2007 I. BACKGROUND IBM Corp.'s Lotus Sametime product provides a real-time online conferencing solution. More information on the product...