DO
Product
Domino
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 7Low 0
Watch
Add Domino to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6087 | 9.8 | Jun 7 | IBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and large amounts of data using Domino TLS Key Exchange validation Affected: 8.5.1.0; 8.5.1.1; 8.5.1.2; 8.5.1.3; 8.5.1.4; 8.5.1.5; +21 more |
| CVE-2017-1274 | 8.8 | Apr 25 | IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated attacker to execute arbitrary code by specifying a large… Affected: 8.5.3; 8.5.3.6; 9.0.0.0; 9.0.1; 9.0.1.8 |
| CVE-2016-0304 | 8.1 | Jun 29 | The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote… Affected: 8.5.3; 8.5.3.1; 8.5.3.2; 8.5.3.3; 8.5.3.4; 8.5.3.5; +19 more |
| CVE-2012-6277 | 7.8 | Feb 21 | Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for… Affected: 8.5.0 through 8.5.3.6 |
| CVE-2018-1771 | 7.8 | Dec 20 | IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe Affected: 9.0.1.0 through 9.0.1.10; 9.0.0.0; 9.0.0.0; 9.0.0.0; 9.0.0.0; 9.0.1.10; +3 more |
| CVE-2016-0301 | 7.8 | Jun 26 | Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a… Affected: 8.5.0; 9.0.1; 9.0.1.1; 9.0.1.2; 9.0.1.3; 9.0.1.4; +16 more |
| CVE-2016-0279 | 7.8 | Jun 26 | Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a… Affected: 8.5.2; 8.5.2.1; 8.5.2.2; 8.5.2.3; 8.5.0; 8.5.3; +16 more |
| CVE-2016-0278 | 7.8 | Jun 26 | Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a… Affected: 8.5.3; 8.5.3.1; 8.5.3.2; 8.5.3.3; 8.5.3.4; 8.5.3.5; +16 more |
| CVE-2016-0277 | 7.8 | Jun 26 | Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a… Affected: 8.5.2; 8.5.2.1; 8.5.2.2; 8.5.2.3; 8.5.3; 8.5.3.1; +16 more |
| CVE-2016-6113 | 6.1 | Feb 1 | IBM Verse is vulnerable to cross-site scripting Affected: 8.5.1.0; 8.5.1.1; 8.5.1.2; 8.5.1.3; 8.5.1.4; 8.5.1.5; +20 more |
| CVE-2016-5884 | 6.1 | Feb 1 | IBM iNotes is vulnerable to cross-site scripting Affected: 8.5.1.0; 8.5.1.1; 8.5.1.2; 8.5.1.3; 8.5.1.4; 8.5.1.5; +20 more |
| CVE-2016-5882 | 6.1 | Feb 1 | IBM iNotes is vulnerable to cross-site scripting Affected: 8.5.1.0; 8.5.1.1; 8.5.1.2; 8.5.1.3; 8.5.1.4; 8.5.1.5; +20 more |
| CVE-2016-2939 | 6.1 | Feb 1 | IBM iNotes is vulnerable to cross-site scripting Affected: 8.5.1.0; 8.5.1.1; 8.5.1.2; 8.5.1.3; 8.5.1.4; 8.5.1.5; +20 more |
| CVE-2016-2938 | 6.1 | Feb 1 | IBM iNotes is vulnerable to cross-site scripting Affected: 8.5.1.0; 8.5.1.1; 8.5.1.2; 8.5.1.3; 8.5.1.4; 8.5.1.5; +20 more |
| CVE-2016-0270 | 5.9 | Feb 8 | IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random nonce generation, which makes it easier for remote… Affected: 9.0.1.3; 9.0.1.4; 9.0.1.5 |
| CVE-2016-5880 | 5.4 | Feb 1 | IBM iNotes is vulnerable to cross-site scripting Affected: 8.5.1.0; 8.5.1.1; 8.5.1.2; 8.5.1.3; 8.5.1.4; 8.5.1.5; +20 more |
| CVE-2015-5040 | – | Oct 29 | Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 8.5.0; 8.5.0.1; 8.5.1; 8.5.1.1; 8.5.1.2; 8.5.1.3; +19 more |
| CVE-2015-4994 | – | Oct 29 | Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 8.5.0; 8.5.1; 8.5.2; 8.5.3; 9.0.1 |
| CVE-2015-2015 | – | Aug 23 | Cross-site scripting (XSS) vulnerability in pubnames.ntf (aka the Directory template) in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web… Affected: through 8.5.3 |
| CVE-2015-2014 | – | Aug 23 | Open redirect vulnerability in the web server in IBM Domino 8.5 before 8.5.3 FP6 IF9 and 9.0 before 9.0.1 FP4 allows remote attackers to redirect users to arbitrary web sites and… Affected: 8.5.0; 8.5.1; 8.5.2; 8.5.3; 9.0.1 |
| CVE-2015-1981 | – | Jun 28 | Cross-site scripting (XSS) vulnerability in the web server in IBM Domino 8.5.x before 8.5.3 FP6 IF8 and 9.x before 9.0.1 FP4, when Webmail is enabled, allows remote authenticated… Affected: 8.5.0; 8.5.1; 8.5.2; 8.5.3; 9.0.1 |
| CVE-2015-1903 | – | May 20 | Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR… Affected: 8.5.0; 8.5.1; 8.5.2; 8.5.3; 9.0.1 |
| CVE-2015-1902 | – | May 20 | Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR… Affected: 8.5.0; 8.5.1; 8.5.2; 8.5.3; 9.0.1 |
| CVE-2015-0135 | – | Apr 21 | IBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to execute arbitrary code or cause a denial of service (integer truncation and application… Affected: 8.5.0; 8.5.1; 8.5.2; 9.0.1 |
| CVE-2015-0179 | – | Apr 6 | Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows local users to obtain the System privilege via unspecified vectors, aka… Affected: 8.5.0; 8.5.1; 8.5.2; 8.5.3; 9.0.1 |
| CVE-2015-0134 | – | Apr 6 | Buffer overflow in the SSLv2 implementation in IBM Domino 8.5.x before 8.5.1 FP5 IF3, 8.5.2 before FP4 IF3, 8.5.3 before FP6 IF6, 9.0 before IF7, and 9.0.1 before FP2 IF3 allows… Affected: 8.5.0; 8.5.1; 8.5.2; 8.5.3; 9.0.1 |
| CVE-2015-0117 | – | Apr 6 | The LDAP Server in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: 8.5.0; 8.5.1; 8.5.2; 8.5.3; 9.0.1 |
Showing 27