novell Vulnerability Advisory Catalog

Total 497 security vulnerabilities recorded for novell software and firmware.

← Back to All Vendors
CVE-2012-0439 UNKNOWN
Component: groupwise

An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arb...

📅 2013-02-24
CVSS 9.3 Dossier →
CVE-2012-0411 UNKNOWN
Component: iprint

Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version act...

📅 2012-12-24
CVSS 10.0 Dossier →
CVE-2012-4959 UNKNOWN
Component: file_reporter

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD...

📅 2012-11-18
CVSS 10.0 Dossier →
CVE-2012-4958 UNKNOWN
Component: file_reporter

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD req...

📅 2012-11-18
CVSS 7.8 Dossier →
CVE-2012-4957 UNKNOWN
Component: file_reporter

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD req...

📅 2012-11-18
CVSS 7.8 Dossier →
CVE-2012-4956 UNKNOWN
Component: file_reporter

Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL e...

📅 2012-11-18
CVSS 10.0 Dossier →
CVE-2012-4933 UNKNOWN
Component: zenworks_asset_management

The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded pas...

📅 2012-10-20
CVSS 7.8 Dossier →
CVE-2012-4912 UNKNOWN
Component: groupwise

Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allow...

📅 2012-09-28
CVSS 4.3 Dossier →
CVE-2012-0419 UNKNOWN
Component: groupwise

Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows rem...

📅 2012-09-28
CVSS 5.0 Dossier →
CVE-2012-0418 UNKNOWN
Component: groupwise

Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user-assisted r...

📅 2012-09-28
CVSS 9.3 Dossier →
CVE-2012-0417 UNKNOWN
Component: groupwise

Integer overflow in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attacke...

📅 2012-09-28
CVSS 10.0 Dossier →
CVE-2012-0272 UNKNOWN
Component: groupwise

Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject ar...

📅 2012-09-19
CVSS 4.3 Dossier →
CVE-2012-0271 UNKNOWN
Component: groupwise

Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before S...

📅 2012-09-19
CVSS 10.0 Dossier →
CVE-2011-3827 UNKNOWN
Component: groupwise

The iCalendar component in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to caus...

📅 2012-09-19
CVSS 4.3 Dossier →
CVE-2012-0421 UNKNOWN
Component: suse_audit_log_keeper

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, wh...

📅 2012-08-08
CVSS 2.1 Dossier →
CVE-2011-3174 UNKNOWN
Component: zenworks_configuration_management

Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks Con...

📅 2012-07-26
CVSS 6.8 Dossier →
CVE-2011-2658 UNKNOWN
Component: zenworks_configuration_management

The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 provides access to the mscomc...

📅 2012-07-26
CVSS 6.8 Dossier →
CVE-2011-2657 UNKNOWN
Component: zenworks_configuration_management

Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in N...

📅 2012-07-26
CVSS 6.8 Dossier →
CVE-2012-0410 UNKNOWN
Component: groupwise

Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface ...

📅 2012-07-05
CVSS 5.0 Dossier →
CVE-2011-4913 UNKNOWN
Component: suse_linux_enterprise_server

The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_DEST_NSAP and FAC_CCITT_SRC_NS...

📅 2012-06-21
CVSS 7.8 Dossier →
CVE-2012-2223 UNKNOWN
Component: zenworks_configuration_management

The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might...

📅 2012-04-11
CVSS 4.3 Dossier →
CVE-2012-2215 UNKNOWN
Component: zenworks_configuration_management

Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to r...

📅 2012-04-09
CVSS 5.0 Dossier →
CVE-2011-4188 UNKNOWN
Component: imanager

Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authenticated users to cause a denia...

📅 2012-04-09
CVSS 4.0 Dossier →
CVE-2011-3176 UNKNOWN
Component: zenworks_configuration_management

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute...

📅 2012-04-09
CVSS 10.0 Dossier →
Page 6 of 21 (497 Total Records)