Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
IbmLotus Domino

11 matches found

CVE
CVE•added 2005/08/03 4:0 a.m.•77 views

CVE-2005-2428

Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password ch...

5CVSS5.8AI score0.07065EPSS
CVE
CVE•added 2005/04/21 4:0 a.m.•54 views

CVE-2000-1215

The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information.

5CVSS6.7AI score0.00765EPSS
CVE
CVE•added 2005/03/26 5:0 a.m.•54 views

CVE-2002-1624

Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters.

5CVSS8.1AI score0.03627EPSS
CVE
CVE•added 2005/09/21 9:3 p.m.•53 views

CVE-2005-3015

Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) BaseTarget or (2) Src parameters.

4.3CVSS5.6AI score0.00353EPSS
CVE
CVE•added 2005/02/20 5:0 a.m.•52 views

CVE-2004-1621

NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of (1) computed for display, (2...

4.3CVSS6.1AI score0.01906EPSS
CVE
CVE•added 2005/07/14 4:0 a.m.•50 views

CVE-2001-1567

Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by ...

5CVSS6.8AI score0.00394EPSS
CVE
CVE•added 2005/08/16 4:0 a.m.•39 views

CVE-2004-2310

Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console.

4.3CVSS6AI score0.02535EPSS
CVE
CVE•added 2005/08/16 4:0 a.m.•38 views

CVE-2004-2311

Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or determine the existence of files via a .. (dot dot) in the new folder dialog.

3.6CVSS6.6AI score0.00734EPSS
CVE
CVE•added 2005/08/16 4:0 a.m.•38 views

CVE-2004-2369

Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. (dot dot) in the directory creation command.

6.4CVSS6.9AI score0.00258EPSS
CVE
CVE•added 2005/05/03 4:0 a.m.•37 views

CVE-2005-1441

Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause a denial of service via the Notes protocol (NRPC).

5CVSS7AI score0.01434EPSS
CVE
CVE•added 2005/07/14 4:0 a.m.•34 views

CVE-2002-2014

Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks.

5CVSS7AI score0.00461EPSS