Novell vulnerabilities

Products

• Suse Linux Enterprise Server 91
• Suse Linux Enterprise Desktop 83
• Groupwise 74
• Netware 71
• Suse Linux Enterprise Software Development Kit 65
• Edirectory 51
• Zenworks Configuration Management 35
• Suse Linux Enterprise Real Time Extension 33
• Iprint 30
• Suse Linux Enterprise Debuginfo 24
• Suse Linux Enterprise Workstation Extension 24
• Suse Linux Enterprise Live Patching 22
• Suse Linux Enterprise Module For Public Cloud 22
• Open Enterprise Server 20
• Netmail 17
• Netware Ftp Server 17
• Suse Linux 17
• Suse Package Hub For Suse Linux Enterprise 17
• Client 16
• Imanager 16
• Ichain 14
• Bordermanager 13
• Suse Studio Onsite 12
• Linux Desktop 11
• Data Synchronizer 7
• File Reporter 7
• Groupwise Webaccess 7
• Mobility Pack 7
• Access Manager 6
• Filr 6
• Groupwise Messenger 6
• Identity Manager Roles Based Provisioning Module 6
• Suse Manager 6
• Zenworks 6
• Iprint Client 5
• Leap 5
• Moonlight 5
• Suse Lifecycle Management Server 5
• Identity Manager 4
• Service Desk 4

Show 29 moreShow less

• Zenworks Handheld Management 4
• Netware Client 3
• Suse Linux Enterprise Module For Web Scripting 3
• Suse Openstack Cloud 3
• Zenworks Asset Management 3
• Zenworks Desktops 3
• Client Firewall 2
• Emframe 2
• Identity Manager User Application 2
• Messenger 2
• Netmail Xe 2
• Client For Windows 2
• Opensuse Build Service 2
• Securelogin 2
• Sentinel Log Manager 2
• Small Business Suite 2
• Suse Cloud 2
• Suse Linux Enterprise Module For Legacy Software 2
• Suse Linux Enterprise Point Of Sale 2
• Suse Linux For Vmware 2
• Suse Linux Sdk 2
• Suse Manager Proxy 2
• Teaming 2
• Vibe Onprem 2
• Web Server 2
• Zenworks Desktop Management 2
• Zenworks Mobile Management 2
• Zenworks Patch Management Server 2
• Zenworks Servers 2

Newest

• samba rsync, almalinux, archlinux arch linux +24 more +26 more Rsync: --safe-links option bypass leads to path traversal CVE-2024-12088 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +11 more +13 more Rsync: heap buffer overflow in rsync due to improper checksum length handling CVE-2024-12084 Public exploitFix available EPSS 72.5% 9.8 CriticalJanuary 9, 2025
• hackerone nextcloud server, nextcloud server, novell suse linux enterprise server +1 more +3 more An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local... CVE-2020-8118 5.0 MediumFebruary 4, 2020
• novell zenworks configuration management Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information. CVE-2012-6345 7.5 HighJanuary 25, 2020
• novell zenworks configuration management Novell ZENworks Configuration Management before 11.2.4 allows XSS. CVE-2012-6344 6.1 MediumJanuary 25, 2020
• google chrome, debian linux, fedoraproject fedora +6 more +8 more Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to... CVE-2019-13730 Fix available 8.8 HighDecember 10, 2019
• mozilla firefox, firefox esr, thunderbird +3 more +5 more As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a... CVE-2019-9811 Fix available 8.3 HighJuly 11, 2019
• mozilla firefox, firefox esr, thunderbird +3 more +5 more A vulnerability exists where the caret ("^") character is improperly escaped constructing some... CVE-2019-11717 Fix available 5.3 MediumJuly 11, 2019
• ffmpeg, canonical ubuntu linux, debian linux +1 more +3 more libavcodec/hevcdec.c in FFmpeg 4.1.2 mishandles detection of duplicate first slices, which allows... CVE-2019-11338 Fix available 8.8 HighApril 18, 2019
• edirectory existing connection is being used even though eDirectory LDAP server is upgraded to EBA CVE-2017-9277 4.2 MediumMarch 2, 2018
• edirectory eDirectory LDAP peer certificate validation issue CVE-2017-9267 6.5 MediumMarch 2, 2018
• thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 more Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, -... CVE-2017-14496 Public exploitFix available EPSS 68.4% 7.5 HighOctober 2, 2017
• thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 more dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive... CVE-2017-14494 Public exploitFix available EPSS 70.5% 5.9 MediumOctober 2, 2017
• thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 more In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size... CVE-2017-13704 Fix available EPSS 65.4% 7.5 HighOctober 2, 2017
• novell zenworks configuration management Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell... CVE-2015-0786 EPSS 23.6% 9.8 CriticalAugust 9, 2017
• novell zenworks configuration management com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration... CVE-2015-0785 7.5 HighAugust 9, 2017
• novell zenworks configuration management Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain... CVE-2015-0784 7.5 HighAugust 9, 2017
• novell zenworks configuration management The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote... CVE-2015-0783 6.5 MediumAugust 9, 2017
• novell zenworks configuration management SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks... CVE-2015-0782 9.8 CriticalAugust 9, 2017
• novell zenworks configuration management Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks... CVE-2015-0781 9.8 CriticalAugust 9, 2017
• novell zenworks configuration management SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell... CVE-2015-0780 9.8 CriticalAugust 9, 2017
• golang go, fedoraproject fedora, novell suse package hub for suse linux enterprise +1 more +3 more A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in... CVE-2017-8932 Fix available 5.9 MediumJune 22, 2017
• gnu glibc, debian linux, mcafee web gateway +17 more +19 more glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate... CVE-2017-1000366 Public exploitFix available 7.8 HighJune 19, 2017
• netiq imanager Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a... CVE-2017-7432 9.8 CriticalMay 3, 2017
• netiq imanager Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have... CVE-2017-7431 8.8 HighMay 3, 2017
• netiq imanager Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a... CVE-2017-7430 6.1 MediumMay 3, 2017
• xen, novell suse linux enterprise point of sale, suse linux enterprise server +3 more +5 more Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them,... CVE-2017-7995 Fix available 3.8 LowMay 2, 2017
• netiq edirectory, imanager +1 more Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8... CVE-2017-5186 7.5 HighApril 27, 2017
• novell groupwise Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot... CVE-2016-5762 9.8 CriticalApril 20, 2017
• novell groupwise Cross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2 Service Pack 1 Hot... CVE-2016-5761 6.1 MediumApril 20, 2017
• novell groupwise Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell... CVE-2016-5760 6.1 MediumApril 20, 2017
• novell groupwise A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell... CVE-2016-9169 6.1 MediumMarch 23, 2017
• novell edirectory A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9... CVE-2016-9168 6.5 MediumMarch 23, 2017
• novell edirectory NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition... CVE-2016-9167 7.5 HighMarch 23, 2017
• novell edirectory A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell... CVE-2016-5747 7.5 HighMarch 23, 2017
• novell netiq idm servicenow driver An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic... CVE-2016-1603 6.5 MediumMarch 23, 2017
• novell iprint Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5... CVE-2010-4314 8.8 HighMarch 11, 2017
• micro focus international open enterprise server Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read... CVE-2017-5182 7.5 HighJanuary 23, 2017
• game-music-emu project game-music-emu, fedoraproject fedora, novell suse linux enterprise desktop +3 more +5 more game-music-emu before 0.6.1 mishandles unspecified integer values. CVE-2016-9961 Fix available 9.8 CriticalDecember 15, 2016
• game-music-emu project game-music-emu, fedoraproject fedora, novell suse linux enterprise desktop +3 more +5 more game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and... CVE-2016-9960 Fix available 5.5 MediumDecember 15, 2016
• novell open enterprise server 11, open enterprise server 2015 +1 more Vulnerability in Novell Open Enterprise Server (OES2015 SP1 before Scheduled Maintenance Update... CVE-2016-5763 9.1 CriticalNovember 15, 2016
• novell identity manager, identity manager identity applications +1 more XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their... CVE-2016-1598 5.4 MediumOctober 27, 2016
• novell suse linux enterprise desktop, suse linux enterprise server, opensuse leap +2 more The mkdumprd script called "dracut" in the current working directory "." allows local users to... CVE-2016-5759 Fix available 7.8 HighOctober 17, 2016
• systemd project systemd, novell suse linux enterprise desktop, suse linux enterprise server +6 more +8 more The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of... CVE-2016-7796 Fix available 5.5 MediumOctober 7, 2016
• openssl, nodejs node.js, novell suse linux enterprise module for web scripting +2 more crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service ... CVE-2016-7052 Fix available EPSS 29.5% 7.5 HighSeptember 26, 2016
• openssl, nodejs node.js, novell suse linux enterprise module for web scripting +2 more Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before... CVE-2016-6304 Fix available EPSS 63.0% 7.5 HighSeptember 22, 2016
• openssl, canonical ubuntu linux, debian linux +6 more +8 more The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote... CVE-2016-6306 Fix available EPSS 41.7% 5.9 MediumSeptember 21, 2016
• novell filr Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for... CVE-2016-1611 Public exploit 7.8 HighAugust 1, 2016
• novell filr Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2... CVE-2016-1610 Public exploit EPSS 11.5% 7.5 HighAugust 1, 2016
• novell filr Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3... CVE-2016-1609 Public exploit 5.4 MediumAugust 1, 2016
• Show olderLoading…