Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

TI-2018-01561 CVE-2018-1771 · GHSA-rjx5-p3j3-5qj8

Memory corruption in IBM Domino

Priority LOW 37

IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe.

CVSS 3.0HIGH 8.4 Local No auth No interaction EPSS 0.00482 Published 2018-12-20 No fix listed CWE-119
TI-2018-01322 CVE-2018-1437 · GHSA-x3h5-3jh8-247m

Untrusted search path in IBM Notes

Priority LOW 38

IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02248 Published 2018-03-14 No fix listed CWE-426
TI-2018-01321 CVE-2018-1435 · GHSA-cfv4-gmqg-xxm6

Untrusted search path in IBM Notes

Priority LOW 39

IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02468 Published 2018-03-14 No fix listed CWE-426
Priority LOW 24

IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared memory IPC.

CVSS 3.0MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00414 Published 2018-02-13 No fix listed CWE-77
Priority LOW 36

IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01062 Published 2018-02-13 No fix listed CWE-426