LN
Product
Lotus Notes
71
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add Lotus Notes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-0118 | – | Jan 9 | Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service (deep recursion leading to stack… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4 |
| CVE-2006-0121 | – | Jan 9 | Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (memory consumption and crash) via unknown vectors related to… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4 |
| CVE-2006-0120 | – | Jan 9 | Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via multiple vectors,… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4 |
| CVE-2006-0119 | – | Jan 9 | Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4 |
| CVE-2006-0117 | – | Jan 9 | Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service (router crash or hang) via unspecified vectors involving "CD to… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4 |
| CVE-2005-2618 | – | Dec 31 | Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary… Affected: 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; 6.5; +5 more |
| CVE-2005-2619 | – | Dec 31 | Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete… Affected: 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; 6.5; +5 more |
| CVE-2005-2454 | – | Dec 31 | IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the "Notes" folder and all children, which allows local users… Affected: 6.5.4; 6.5.5; 7.0.0; 7.0.1 |
| CVE-2005-2696 | – | Aug 26 | IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remote attackers to obtain sensitive information via the (1)… Affected: All versions, or not specified |
| CVE-2005-2175 | – | Jul 9 | The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to… Affected: All versions, or not specified |
| CVE-2005-1442 | – | May 3 | Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service (client crash) and possibly execute… Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.5; +3 more |
| CVE-2005-1405 | – | May 3 | HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via… Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.5; +3 more |
| CVE-2004-2281 | – | Dec 31 | Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by (1)… Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.5; +3 more |
| CVE-2004-2280 | – | Dec 31 | Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service (crash) via unknown vectors related to Java… Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +4 more |
| CVE-2004-0480 | – | Dec 6 | Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to… Affected: 6.0.3; 6.5 |
| CVE-2002-0370 | – | Oct 10 | Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with… Affected: through 4.5; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +6 more |
| CVE-2001-1504 | – | Dec 31 | Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user… Affected: 4.6; 5.0 |
| CVE-2000-0891 | – | Jul 21 | A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed… Affected: through 5.02 |
| CVE-2000-1117 | – | Jan 9 | The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the… Affected: r5 |
| CVE-2000-1138 | – | Jan 9 | Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit… Affected: through 5.0.5; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4 |
| CVE-1999-0429 | – | Mar 1 | The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference Affected: 4.5 |