cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2013-3985,https://securityvulnerability.io/vulnerability/CVE-2013-3985,,"The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable.",IBM,Lotus Sametime,,,0.0016799999866634607,false,,false,false,false,,,false,false,,2013-11-09T01:00:00.000Z,0
CVE-2013-0537,https://securityvulnerability.io/vulnerability/CVE-2013-0537,,The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges.,IBM,Lotus Sametime,,,0.0007699999841861427,false,,false,false,false,,,false,false,,2013-11-09T01:00:00.000Z,0
CVE-2013-3044,https://securityvulnerability.io/vulnerability/CVE-2013-3044,,"The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges.",IBM,Lotus Sametime,,,0.0007699999841861427,false,,false,false,false,,,false,false,,2013-11-09T01:00:00.000Z,0
CVE-2013-3045,https://securityvulnerability.io/vulnerability/CVE-2013-3045,,The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function.,IBM,Lotus Sametime,,,0.0006600000197067857,false,,false,false,false,,,false,false,,2013-11-09T01:00:00.000Z,0
CVE-2013-3986,https://securityvulnerability.io/vulnerability/CVE-2013-3986,,IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service (WebPlayer Firefox extension crash) via a crafted Audio Visual (AV) session.,IBM,Lotus Sametime,,,0.012480000033974648,false,,false,false,false,,,false,false,,2013-11-08T15:00:00.000Z,0
CVE-2013-0534,https://securityvulnerability.io/vulnerability/CVE-2013-0534,,"The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory.",IBM,"Lotus Sametime,Sametime",,,0.0004199999966658652,false,,false,false,false,,,false,false,,2013-06-21T14:00:00.000Z,0
CVE-2013-0535,https://securityvulnerability.io/vulnerability/CVE-2013-0535,,Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.,IBM,"Classic Meeting Server,Lotus Sametime",,,0.0008399999933317304,false,,false,false,false,,,false,false,,2013-05-02T18:00:00.000Z,0
CVE-2013-0553,https://securityvulnerability.io/vulnerability/CVE-2013-0553,,"The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other products, allows remote authenticated users to send commands to individual chat users, or to all participants in a chat room, via a crafted Sametime Instant Message (IM).",IBM,"Sametime,Lotus Sametime",,,0.0006600000197067857,false,,false,false,false,,,false,false,,2013-04-28T01:00:00.000Z,0
CVE-2013-0533,https://securityvulnerability.io/vulnerability/CVE-2013-0533,,Cross-site scripting (XSS) vulnerability in the Sametime Links server in IBM Sametime 8.0.2 through 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.,IBM,Lotus Sametime,,,0.0006200000061653554,false,,false,false,false,,,false,false,,2013-04-28T01:00:00.000Z,0
CVE-2012-4821,https://securityvulnerability.io/vulnerability/CVE-2012-4821,,"Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via ""insecure use"" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.",IBM,"Lotus Domino,5.1.1,Lotus Notes,Lotus Notes Traveler,Rational Host On-demand,Tivoli Monitoring,Smart Analytics System 5600 Software,Rational Change,Lotus Notes Sametime,Websphere Real Time,Tivoli Remote Control,Service Delivery Manager,5.0,Smart Analytics System 5600,5.1,Java",,,0.4424299895763397,false,,false,false,false,,,false,false,,2013-01-11T00:00:00.000Z,0
CVE-2012-4820,https://securityvulnerability.io/vulnerability/CVE-2012-4820,,"Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to ""insecure use of the java.lang.reflect.Method invoke() method.""",IBM,"Lotus Domino,5.1.1,Lotus Notes,Lotus Notes Traveler,Rational Host On-demand,Tivoli Monitoring,Smart Analytics System 5600 Software,Rational Change,Lotus Notes Sametime,Websphere Real Time,Tivoli Remote Control,Service Delivery Manager,5.0,Smart Analytics System 5600,5.1,Java",,,0.2008800059556961,false,,false,false,false,,,false,false,,2013-01-11T00:00:00.000Z,0
CVE-2012-4823,https://securityvulnerability.io/vulnerability/CVE-2012-4823,,"Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers to execute arbitrary code via vectors related to ""insecure use of the java.lang.ClassLoder defineClass() method.""",IBM,"Lotus Domino,5.1.1,Lotus Notes,Lotus Notes Traveler,Rational Host On-demand,Tivoli Monitoring,Smart Analytics System 5600 Software,Rational Change,Lotus Notes Sametime,Websphere Real Time,Tivoli Remote Control,Service Delivery Manager,5.0,Smart Analytics System 5600,5.1,Java",,,0.8605200052261353,false,,false,false,false,,,false,false,,2013-01-11T00:00:00.000Z,0
CVE-2012-4822,https://securityvulnerability.io/vulnerability/CVE-2012-4822,,"Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via vectors related to ""insecure use [of] multiple methods in the java.lang.class class.""",IBM,"Lotus Domino,5.1.1,Lotus Notes,Lotus Notes Traveler,Rational Host On-demand,Tivoli Monitoring,Smart Analytics System 5600 Software,Rational Change,Lotus Notes Sametime,Websphere Real Time,Tivoli Remote Control,Service Delivery Manager,5.0,Smart Analytics System 5600,5.1,Java",,,0.8727999925613403,false,,false,false,false,,,false,false,,2013-01-11T00:00:00.000Z,0
CVE-2011-1370,https://securityvulnerability.io/vulnerability/CVE-2011-1370,,"The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message.",IBM,Lotus Sametime,,,0.00279999990016222,false,,false,false,false,,,false,false,,2011-10-29T10:00:00.000Z,0
CVE-2011-1106,https://securityvulnerability.io/vulnerability/CVE-2011-1106,,Cross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action.,IBM,Lotus Sametime,,,0.007890000008046627,false,,false,false,false,,,false,false,,2011-03-01T22:00:00.000Z,0
CVE-2011-1038,https://securityvulnerability.io/vulnerability/CVE-2011-1038,,Multiple cross-site scripting (XSS) vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the messageString parameter in a WebMessage action or (2) the PATH_INFO.,IBM,Lotus Sametime,,,0.003920000046491623,false,,false,false,false,,,false,false,,2011-02-22T18:00:00.000Z,0
CVE-2010-3398,https://securityvulnerability.io/vulnerability/CVE-2010-3398,,"Unspecified vulnerability in the webcontainer implementation in IBM Lotus Sametime Connect 8.5.1 before CF1 has unknown impact and attack vectors, aka SPRs LXUU87S57H and LXUU87S93W.",IBM,Lotus Sametime,,,0.002259999979287386,false,,false,false,false,,,false,false,,2010-09-15T20:00:00.000Z,0
CVE-2008-2499,https://securityvulnerability.io/vulnerability/CVE-2008-2499,,"Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a crafted URL.",IBM,Lotus Sametime,,,0.9625599980354309,false,,false,false,false,,,false,false,,2008-05-29T16:00:00.000Z,0
CVE-2008-0354,https://securityvulnerability.io/vulnerability/CVE-2008-0354,,"Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim.",IBM,Lotus Sametime,,,0.01672999933362007,false,,false,false,false,,,false,false,,2008-01-18T21:00:00.000Z,0
CVE-2007-6295,https://securityvulnerability.io/vulnerability/CVE-2007-6295,,Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI.,IBM,Lotus Sametime,,,0.006630000192672014,false,,false,false,false,,,false,false,,2007-12-10T18:00:00.000Z,0
CVE-2007-4142,https://securityvulnerability.io/vulnerability/CVE-2007-4142,,Cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a crafted Sametime meeting.,IBM,Lotus Sametime,,,0.0050200000405311584,false,,false,false,false,,,false,false,,2007-08-03T20:00:00.000Z,0
CVE-2007-1784,https://securityvulnerability.io/vulnerability/CVE-2007-1784,,The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function.,IBM,Lotus Sametime,,,0.03623000159859657,false,,false,false,false,,,false,false,,2007-03-31T01:00:00.000Z,0