Vulnerabilities > IBM > Lotus Notes

DATE CVE VULNERABILITY TITLE RISK
2005-05-03 CVE-2005-1405 Local Security vulnerability in Lotus Notes
HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications.
local
low complexity
ibm
2.1
2004-12-31 CVE-2004-2281 Java Applet vulnerability in IBM Lotus Notes
Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by (1) KSPR5YS6GR and (2) KSPR62F4D3.
network
low complexity
ibm
critical
10.0
2004-12-31 CVE-2004-2280 Java Applet vulnerability in IBM Lotus Notes
Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service (crash) via unknown vectors related to Java applets, as identified by KSPR62F4KN.
network
low complexity
ibm
5.0
2002-10-10 CVE-2002-0370 Buffer Overflow vulnerability in Multiple Vendor ZIP Files Long Filename
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.
7.5
2001-12-31 CVE-2001-1504 Unspecified vulnerability in IBM Lotus Notes 4.6/5.0
Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message.
network
low complexity
ibm
7.5
2001-01-09 CVE-2000-1138 Unspecified vulnerability in IBM Lotus Notes
Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected.
network
low complexity
ibm
7.5
1999-03-01 CVE-1999-0429 Unspecified vulnerability in IBM Lotus Notes 4.5
The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference.
network
low complexity
ibm
7.5