LD
Product
Lotus Domino
86
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Lotus Domino to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-1286 | – | Apr 13 | The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (daemon crash) via a MIME e-mail… Affected: 8.0; 8.0.1; 8.0.2; 8.0.2.1 |
| CVE-2008-2240 | – | May 22 | Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon… Affected: 6.0; 6.5; 7.0; 8.0; 8.0.1 |
| CVE-2008-0243 | – | Jan 12 | Unspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a denial of service via unknown vectors Affected: 7.0; 7.0.1; 7.0.2; 7.0.2; 7.0.2 |
| CVE-2007-5924 | – | Nov 10 | Cross-site scripting (XSS) vulnerability in the Web Server (HTTP) task in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.2 FP2, allows remote authenticated users to inject… Affected: through 6.5.6; 7.0; 7.0.2; 7.0.2 |
| CVE-2007-5700 | – | Oct 29 | The Evaluate LotusScript method in IBM Lotus Domino before 7.0.3 uses an incorrect security context for @ formula commands in some circumstances, which might allow remote… Affected: 6.5.5; 6.5.5; 6.5.5; 6.5.5; 6.5.6; 6.5.6; +4 more |
| CVE-2007-5701 | – | Oct 29 | Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local users, or attackers with physical access, to obtain sensitive… Affected: 6.5.5; 6.5.5; 6.5.5; 6.5.5; 6.5.6; 6.5.6; +4 more |
| CVE-2007-3510 | – | Oct 29 | Buffer overflow in the IMAP service in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.3, allows remote authenticated users to execute arbitrary code via a long mailbox name Affected: 6.5.5; 6.5.5; 6.5.5; 6.5.5; 6.5.6; 6.5.6; +4 more |
| CVE-2007-0068 | – | Jun 6 | IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain… Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2006-4843 | – | Mar 29 | Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.4; +7 more |
| CVE-2007-1739 | – | Mar 28 | Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service (crash) via a long,… Affected: 7.0; 7.0.1; 7.0.2 |
| CVE-2007-1675 | – | Mar 28 | Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.4; +7 more |
| CVE-2007-0977 | – | Feb 16 | IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and… Affected: 5.0; 6.0 |
| CVE-2006-5818 | – | Nov 8 | Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0.2 allow local users to gain privileges and execute arbitrary code via unspecified… Affected: through 6.5.5; through 7.0.1; 6.0; 6.0.1; 6.0.2; 6.0.2_cf2; +12 more |
| CVE-2006-0120 | – | Jan 9 | Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via multiple vectors,… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.4; +1 more |
| CVE-2006-0121 | – | Jan 9 | Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (memory consumption and crash) via unknown vectors related to… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.4; +1 more |
| CVE-2006-0119 | – | Jan 9 | Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.4; +1 more |
| CVE-2006-0118 | – | Jan 9 | Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service (deep recursion leading to stack… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.4; +1 more |
| CVE-2006-0117 | – | Jan 9 | Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service (router crash or hang) via unspecified vectors involving "CD to… Affected: 6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.4; +1 more |
| CVE-2005-4819 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0 allows remote attackers to inject arbitrary web script or… Affected: 6.0.5; 6.5.4; 6.5.4.1; 6.5.4.2; 6.5.4.3 |
| CVE-2005-2712 | – | Dec 31 | The LDAP server (nldap.exe) in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service (crash) via a long bind request, which… Affected: 6.0; 6.0.1; 6.0.1.1; 6.0.1.2; 6.0.1.3; 6.0.2.1; +12 more |
| CVE-2005-3015 | – | Sep 21 | Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) BaseTarget or (2) Src parameters Affected: 6.5.2 |
| CVE-2005-2428 | – | Aug 3 | Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the… Affected: 5.0; 6.0; 6.5 |
| CVE-2005-1441 | – | May 3 | Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause a denial of service via the Notes protocol (NRPC) Affected: 6.0; 6.0.1; 6.0.2; 6.0.2_cf2; 6.0.3; 6.5.0; +3 more |
| CVE-2004-2310 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick… Affected: 6.5.1 |
| CVE-2004-2369 | – | Dec 31 | Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a Affected: 6.5.1 |
| CVE-2004-2311 | – | Dec 31 | Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or determine the existence of files via a Affected: 6.5.1 |
| CVE-2004-1621 | – | Oct 18 | NOTE: this issue has been disputed by the vendor Affected: 6.0; 6.0.1; 6.0.2; 6.0.2_cf2; 6.0.3; 6.5.0; +2 more |
| CVE-2004-0669 | – | Aug 6 | Lotus Domino 6.5.0 and 6.5.1, with IMAP enabled, allows remote authenticated users to change their quota by using the IMAP setquota command Affected: 6.5.0; 6.5.1 |
| CVE-2004-0029 | – | Jan 20 | Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain… Affected: 6.0.2 |
| CVE-2003-0123 | – | Mar 18 | Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line Affected: 4.6.1; 4.6.3; 4.6.4; 5.0; 5.0.1; 5.0.2; +14 more |
| CVE-2003-0122 | – | Mar 18 | Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name (DN) during… Affected: 4.6.1; 4.6.3; 4.6.4; 5.0; 5.0.1; 5.0.2; +13 more |
| CVE-2002-1624 | – | Dec 31 | Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary… Affected: 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.4a; +8 more |
| CVE-2002-2014 | – | Dec 31 | Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user… Affected: 5.0.8 |
| CVE-2002-0086 | – | Mar 15 | Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable Affected: 5.0.4; 5.0.7 |
| CVE-2001-1567 | – | Dec 31 | Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via… Affected: 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +5 more |
| CVE-2000-1215 | – | Sep 19 | The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote… Affected: 5.0.8 |