LN
Product
Lotus Notes
71
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add Lotus Notes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-5544 | 7.8 | Oct 29 | IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions (Everyone:Full Control) for memory mapped files… Affected: through 6.5.5; 7.0.0 before 7.0.3 |
| CVE-2013-0522 | 7.0 | Jul 16 | The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving… Affected: 8.0; 8.0.1; 8.0.2; 8.5; 8.5.1; 8.5.2; +2 more |
| CVE-2014-3086 | – | Aug 12 | Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain… Affected: 8.5.3.0; 9.0.1.0 |
| CVE-2014-0892 | – | Apr 23 | IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute… Affected: 8.5; 8.5.0.0; 8.5.0.1; 8.5.1; 8.5.1.0; 8.5.1.1; +17 more |
| CVE-2012-6349 | – | Jul 18 | Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrary code via a crafted file, aka… Affected: 8.5; 8.5.0.0; 8.5.0.1; 8.5.1; 8.5.1.0; 8.5.1.1; +12 more |
| CVE-2013-0536 | – | Jun 21 | ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges… Affected: 8.0; 8.0.1; 8.0.2; 8.5; 8.5.1 |
| CVE-2013-2977 | – | May 10 | Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix 1 on Windows, and 8.5.x before 8.5.3 FP5 and 9.x before 9.0.1 on Linux, allows… Affected: 8.5; 8.5.0.0; 8.5.0.1; 8.5.1; 8.5.1.0; 8.5.1.1; +34 more |
| CVE-2013-0538 | – | May 1 | Cross-site scripting (XSS) vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script… Affected: 8.0; 8.0.0; 8.0.1; 8.0.2; 8.0.2.0; 8.0.2.1; +24 more |
| CVE-2013-0127 | – | May 1 | IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended… Affected: 8.0; 8.0.0; 8.0.1; 8.0.2; 8.0.2.0; 8.0.2.1; +24 more |
| CVE-2012-4823 | – | Jan 11 | Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13… Affected: 8.0; 8.0.0; 8.0.1; 8.0.2; 8.0.2.0; 8.0.2.1; +23 more |
| CVE-2012-4822 | – | Jan 11 | Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142… Affected: 8.0; 8.0.0; 8.0.1; 8.0.2; 8.0.2.0; 8.0.2.1; +23 more |
| CVE-2012-4821 | – | Jan 11 | Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142… Affected: 8.0; 8.0.0; 8.0.1; 8.0.2; 8.0.2.0; 8.0.2.1; +23 more |
| CVE-2012-4820 | – | Jan 11 | Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13… Affected: 8.0; 8.0.0; 8.0.1; 8.0.2; 8.0.2.0; 8.0.2.1; +23 more |
| CVE-2012-4846 | – | Dec 19 | IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application cookie, which makes it easier for remote attackers to obtain… Affected: 8.5.0.0; 8.5.0.1; 8.5.1; 8.5.1.0; 8.5.1.1; 8.5.1.2; +10 more |
| CVE-2010-5251 | – | Sep 7 | Multiple untrusted search path vulnerabilities in IBM Lotus Notes 8.5 allow local users to gain privileges via a Trojan horse (1) nnoteswc.dll or (2) nlsxbe.dll file in the… Affected: 8.5 |
| CVE-2012-2174 | – | Jun 20 | The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL Affected: 8.0; 8.0.0; 8.0.1; 8.0.2; 8.0.2.0; 8.0.2.1; +21 more |
| CVE-2011-1512 | – | May 31 | Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF… Affected: through 8.5.2.2; 3.0; 3.0.0.1; 3.0.0.2; 4.2; 4.2.1; +34 more |
| CVE-2011-1218 | – | May 31 | Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .zip attachment,… Affected: through 8.5.2.2; 3.0; 3.0.0.1; 3.0.0.2; 4.2; 4.2.1; +34 more |
| CVE-2011-1217 | – | May 31 | Buffer overflow in kpprzrdr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .prz attachment Affected: through 8.5.2.2; 3.0; 3.0.0.1; 3.0.0.2; 4.2; 4.2.1; +34 more |
| CVE-2011-1216 | – | May 31 | Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via crafted tag data in… Affected: through 8.5.2.2; 3.0; 3.0.0.1; 3.0.0.2; 4.2; 4.2.1; +34 more |
| CVE-2011-1215 | – | May 31 | Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in… Affected: through 8.5.2.2; 7.0; 7.0.0; 7.0.1; 7.0.1.1; 7.0.2; +31 more |
| CVE-2011-1214 | – | May 31 | Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in… Affected: through 8.5.2.2; 3.0; 3.0.0.1; 3.0.0.2; 4.2; 4.2.1; +34 more |
| CVE-2011-1213 | – | May 31 | Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh… Affected: through 8.5.2.2; 3.0; 3.0.0.1; 3.0.0.2; 4.2; 4.2.1; +34 more |
| CVE-2011-0912 | – | Feb 8 | Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing… Affected: 8.0; 8.0.1; 8.0.2; 8.0.2.0; 8.0.2.1; 8.0.2.2; +10 more |
| CVE-2010-1608 | – | Apr 29 | Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unknown attack vectors, as… Affected: 8.5; 8.5.1; 8.5.1.1 |
| CVE-2010-1487 | – | Apr 20 | IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file,… Affected: 7.0; 8.0; 8.5 |
| CVE-2009-3032 | – | Mar 5 | Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10… Affected: 8.5 |
| CVE-2009-3114 | – | Sep 9 | The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet… Affected: 8.5 |
| CVE-2009-3037 | – | Sep 1 | Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec… Affected: 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +32 more |
| CVE-2008-4564 | – | Mar 18 | Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail… Affected: 5.0.3; 5.0.12; 6.0; 6.0.1; 6.0.2; 6.0.3; +18 more |
| CVE-2007-5399 | – | Apr 10 | Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, allow remote attackers to execute… Affected: 6.0; 6.5; 7.0; 7.0.2; 7.0.3 |
| CVE-2007-5405 | – | Apr 10 | Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail… Affected: 6.0; 6.5; 7.0; 7.0.2; 7.0.3 |
| CVE-2007-5406 | – | Apr 10 | kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF… Affected: 6.0; 6.5; 7.0; 8.0; 8.0.1 |
| CVE-2007-6020 | – | Apr 10 | Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail… Affected: 6.0; 6.5; 7.0; 7.0.2; 7.0.3 |
| CVE-2008-0066 | – | Apr 10 | Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to… Affected: 7.0.2; 7.0.3 |
| CVE-2008-1101 | – | Apr 10 | Buffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allows remote attackers to… Affected: 6.0; 6.5; 7.0; 7.0.2; 7.0.3 |
| CVE-2008-1718 | – | Apr 10 | Buffer overflow in mimesr.dll in Autonomy (formerly Verity) KeyView, as used in IBM Lotus Notes before 8.0, might allow user-assisted remote attackers to execute arbitrary code… Affected: 6.0; 6.5; 7.0; 8.0; 8.0.1 |
| CVE-2007-6706 | – | Mar 9 | Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code… Affected: through 7.0.2; 6.5; 8.0 |
| CVE-2008-1217 | – | Mar 9 | Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before 8.0.1 allows remote attackers to execute arbitrary code via… Affected: 6.5; 7.0.2; 8.0.0 |
| CVE-2008-0862 | – | Feb 21 | IBM Lotus Notes 6.0, 6.5, 7.0, and 8.0 signs an unsigned applet when a user forwards an email message to another user, which allows user-assisted remote attackers to bypass… Affected: 6.0; 6.5; 7.0; 8.0 |
| CVE-2007-6594 | – | Dec 28 | IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained through a Notes 8 download and (2) 0777 permissions for the… Affected: through 8.0.1 |
| CVE-2007-6593 | – | Dec 28 | Multiple stack-based buffer overflows in l123sr.dll in Autonomy (formerly Verity) KeyView SDK, as used by IBM Lotus Notes 5.x through 8.x, allow user-assisted remote attackers to… Affected: 5.0; 6.0; 6.5; 7.0; 8.0 |
| CVE-2007-5909 | – | Nov 10 | Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes… Affected: through 7.0.2 |
| CVE-2007-5910 | – | Nov 10 | Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes… Affected: through 7.0.2 |
| CVE-2007-4222 | – | Oct 29 | Buffer overflow in the TagAttributeListCopy function in nnotes.dll in IBM Lotus Notes before 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a crafted… Affected: through 7.0.2 |
| CVE-2007-4309 | – | Aug 13 | IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote authenticated administrators to obtain a cleartext notes.id password by setting the notes.ini (1) KFM_ShowEntropy and… Affected: 5.0; 6.0; 7.0; 7.0.1; 7.0.2 |
| CVE-2007-1941 | – | Apr 11 | Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web Access (DWA) in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote… Affected: 6.5.5; 7.0; 7.0.1 |
| CVE-2006-5835 | – | Nov 10 | The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which… Affected: 5.0.3; 5.0.12; 6.0; 6.0.1; 6.0.2; 6.0.3; +10 more |
| CVE-2006-3778 | – | Jul 24 | IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the (1) "Save As Draft" option is used or (2) a "," (comma) is… Affected: 6.0; 6.5; 7.0 |
| CVE-2006-1948 | – | Apr 20 | The "Add Sender to Address Book" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the… Affected: 6.0; 6.5 |