Show filters
23 Total Results
Displaying 11-20 of 23
Sort by:
Attacker Value
Unknown
CVE-2012-5309
Disclosure Date: October 08, 2012 (last updated October 05, 2023)
servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 does not properly restrict invalid authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
0
Attacker Value
Unknown
CVE-2012-4825
Disclosure Date: October 08, 2012 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler before 8.5.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) userId or (2) address parameter in a getClientConfigFile action.
0
Attacker Value
Unknown
CVE-2012-5308
Disclosure Date: October 08, 2012 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action.
0
Attacker Value
Unknown
CVE-2012-5307
Disclosure Date: October 08, 2012 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via the redirectURL parameter, a different vulnerability than CVE-2012-4824 and CVE-2012-4825.
0
Attacker Value
Unknown
CVE-2012-2174
Disclosure Date: June 20, 2012 (last updated October 04, 2023)
The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL.
0
Attacker Value
Unknown
CVE-2011-1218
Disclosure Date: May 31, 2011 (last updated October 04, 2023)
Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .zip attachment, aka SPR PRAD8E3NSP. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2011-1213
Disclosure Date: May 31, 2011 (last updated October 04, 2023)
Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W.
0
Attacker Value
Unknown
CVE-2011-1214
Disclosure Date: May 31, 2011 (last updated October 04, 2023)
Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a .rtf attachment, aka SPR PRAD8823JQ.
0
Attacker Value
Unknown
CVE-2011-1512
Disclosure Date: May 31, 2011 (last updated October 04, 2023)
Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment, aka SPR PRAD8E3HKR.
0
Attacker Value
Unknown
CVE-2011-1217
Disclosure Date: May 31, 2011 (last updated October 04, 2023)
Buffer overflow in kpprzrdr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .prz attachment. NOTE: some of these details are obtained from third party information.
0
