Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_domino:6.5.4:*:fp2:*:*:*:*:*

part: a version: 6.5.4 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductLotus Domino (7030e5ee-c39c-5b5b-b087-3089d04acc96)
Editionfp2
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-1675 vulnerable 2026-06-08 04:49:43.216967 Details available
Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username.
Published: 2007-03-28T21:00:00.000Z
Updated: 2024-08-07T13:06:25.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5818 vulnerable 2026-06-08 04:49:21.349309 Details available
Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0.2 allow local users to gain privileges and execute arbitrary code via unspecified vectors.
Published: 2006-11-08T23:00:00.000Z
Updated: 2024-08-07T20:04:55.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4843 vulnerable 2026-06-08 04:49:18.982315 Details available
Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified "code sequences" that bypass the protection scheme.
Published: 2007-03-29T21:00:00.000Z
Updated: 2024-08-07T19:23:41.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0121 vulnerable 2026-06-08 04:48:45.988774 Details available
Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (memory consumption and crash) via unknown vectors related to (1) unspecified vectors during the SSL handshake (SPR# MKIN67MQVW), (2) the stash file during the SSL handshake (SPR# MKIN693QUT), and possibly other vectors. NOTE: due to insufficient information in the original vendor advisory, it is not clear whether there is an attacker role in other memory leaks that are specified in the advisory.
Published: 2006-01-09T11:00:00.000Z
Updated: 2024-08-07T16:25:33.450Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0120 vulnerable 2026-06-08 04:48:45.988080 Details available
Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via multiple vectors, involving (1) a malformed message sent to an "Out Of Office" agent (SPR LPEE6DMQWJ), (2) the compact command (RTIN5U2SAJ), (3) malformed bitmap images (MYAA6FH5HW), (4) the "Delete Attachment" action (YPHG6844LD), (5) parsing certificates from a remote Certificate Table (AELE6DZFJW), and (6) creating a SSL key ring with the Domino Administration client (NSUA4FQPTN).
Published: 2006-01-09T11:00:00.000Z
Updated: 2024-08-07T16:25:33.693Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0119 vulnerable 2026-06-08 04:48:45.987286 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0118 vulnerable 2026-06-08 04:48:45.986055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0117 vulnerable 2026-06-08 04:48:45.981713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.