Domino (Ibm) - vulnerabilities (CVEs)

27 CVEs, 0 in the last 30 days, 64 known versions, newest CVE from 2020-02-21. Vendor: Ibm.

CVEs of Domino

• CVE-2012-6277 - CVSS 7.8 (high), 2020-02-21: Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec…
• CVE-2018-1771 - CVSS 8.4 (high), 2018-12-20: IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments…
• CVE-2016-6087 - CVSS 9.8 (critical), 2017-06-07: IBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and large amounts of data using Domino TLS Key Exchange…
• CVE-2017-1274 - CVSS 8.8 (high), 2017-04-25: IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated attacker to execute arbitrary code by…
• CVE-2016-0270 - CVSS 5.9 (medium), 2017-02-08: IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random nonce generation, which makes it…
• CVE-2016-6113 - CVSS 6.1 (medium), 2017-02-01: IBM Verse is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
• CVE-2016-2938 - CVSS 6.1 (medium), 2017-02-01: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
• CVE-2016-5882 - CVSS 6.1 (medium), 2017-02-01: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
• CVE-2016-5880 - CVSS 5.4 (medium), 2017-02-01: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
• CVE-2016-2939 - CVSS 6.1 (medium), 2017-02-01: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
• CVE-2016-5884 - CVSS 6.1 (medium), 2017-02-01: IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
• CVE-2016-0304 - CVSS 8.1 (high), 2016-06-29: The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is…
• CVE-2016-0301 - CVSS 7.8 (high), 2016-06-26: Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute…
• CVE-2016-0279 - CVSS 7.8 (high), 2016-06-26: Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute…
• CVE-2016-0278 - CVSS 7.8 (high), 2016-06-26: Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute…
• CVE-2016-0277 - CVSS 7.8 (high), 2016-06-26: Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute…
• CVE-2015-5040 - CVSS 7.5 (high), 2015-10-29: Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or…
• CVE-2015-4994 - CVSS 7.5 (high), 2015-10-29: Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or…
• CVE-2015-2015 - CVSS 4.3 (medium), 2015-08-23: Cross-site scripting (XSS) vulnerability in pubnames.ntf (aka the Directory template) in the web server in IBM Domino before 9.0.0 allows remote attackers to…
• CVE-2015-2014 - CVSS 5.8 (medium), 2015-08-23: Open redirect vulnerability in the web server in IBM Domino 8.5 before 8.5.3 FP6 IF9 and 9.0 before 9.0.1 FP4 allows remote attackers to redirect users to…
• CVE-2015-1981 - CVSS 2.1 (low), 2015-06-28: Cross-site scripting (XSS) vulnerability in the web server in IBM Domino 8.5.x before 8.5.3 FP6 IF8 and 9.x before 9.0.1 FP4, when Webmail is enabled, allows…
• CVE-2015-1903 - CVSS 10 (critical), 2015-05-20: Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a…
• CVE-2015-1902 - CVSS 10 (critical), 2015-05-20: Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a…
• CVE-2015-0135 - CVSS 10 (critical), 2015-04-21: IBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to execute arbitrary code or cause a denial of service (integer…
• CVE-2015-0179 - CVSS 7.2 (high), 2015-04-06: Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows local users to obtain the System privilege via…
• CVE-2015-0134 - CVSS 10 (critical), 2015-04-06: Buffer overflow in the SSLv2 implementation in IBM Domino 8.5.x before 8.5.1 FP5 IF3, 8.5.2 before FP4 IF3, 8.5.3 before FP6 IF6, 9.0 before IF7, and 9.0.1…
• CVE-2015-0117 - CVSS 10 (critical), 2015-04-06: The LDAP Server in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows remote attackers to execute arbitrary code or cause a denial of…