Novell vulnerabilities
642 vulnerabilities
Known vulnerabilities in Novell products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 109 products.
Products
50 of 109- Suse Linux Enterprise Server91 vulnerabilities
- Suse Linux Enterprise Desktop83 vulnerabilities
- Groupwise74 vulnerabilities
- Suse Linux Enterprise Software Development Kit65 vulnerabilities
- Netware64 vulnerabilities
- Edirectory50 vulnerabilities
- Zenworks Configuration Management35 vulnerabilities
- Suse Linux Enterprise Real Time Extension33 vulnerabilities
- Iprint30 vulnerabilities
- Suse Linux Enterprise Debuginfo24 vulnerabilities
- Suse Linux Enterprise Workstation Extension24 vulnerabilities
- Suse Linux Enterprise Live Patching22 vulnerabilities
- Suse Linux Enterprise Module For Public Cloud22 vulnerabilities
- Netmail17 vulnerabilities
- Open Enterprise Server17 vulnerabilities
- Suse Linux17 vulnerabilities
- Suse Package Hub For Suse Linux Enterprise17 vulnerabilities
- Client16 vulnerabilities
- Imanager16 vulnerabilities
- Ichain14 vulnerabilities
- Bordermanager13 vulnerabilities
- Suse Studio Onsite12 vulnerabilities
- Linux Desktop11 vulnerabilities
- Netware Ftp Server9 vulnerabilities
- Data Synchronizer7 vulnerabilities
- Mobility Pack7 vulnerabilities
- Access Manager6 vulnerabilities
- File Reporter6 vulnerabilities
- Filr6 vulnerabilities
- Groupwise Messenger6 vulnerabilities
- Groupwise Webaccess6 vulnerabilities
- Identity Manager Roles Based Provisioning Module6 vulnerabilities
- Suse Manager6 vulnerabilities
- Zenworks6 vulnerabilities
- Iprint Client5 vulnerabilities
- Leap5 vulnerabilities
- Moonlight5 vulnerabilities
- Suse Lifecycle Management Server5 vulnerabilities
- Service Desk4 vulnerabilities
- Zenworks Handheld Management4 vulnerabilities
- Identity Manager3 vulnerabilities
- Netware Client3 vulnerabilities
- Suse Linux Enterprise Module For Web Scripting3 vulnerabilities
- Suse Openstack Cloud3 vulnerabilities
- Zenworks Asset Management3 vulnerabilities
- Zenworks Desktops3 vulnerabilities
- Client Firewall2 vulnerabilities
- Emframe2 vulnerabilities
- Identity Manager User Application2 vulnerabilities
- Messenger2 vulnerabilities
CVE-2003-1592novellnetware
EPSS score1.72%
Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allow remote attackers to cause a denial of service (abend) via a long (1) username or (2) password.CVE-2003-1591novellnetwareEPSS score1.48%
NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of service (console hang) via a large number of FTP sessions, which are not properly handled during an NLM unload.CVE-2003-1594novellnetwareEPSS score1.94%
NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass intended access restrictions via an FTP session.CVE-2003-1593novellnetwareEPSS score1.94%
NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote attackers to bypass intended access control via an FTP connection.CVE-2003-1150novellnetware+1EPSS score4.14%
Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors.CVE-2003-1551novellgroupwiseEPSS score1.58%
Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script."CVE-2003-1595novellnetwareEPSS score1.70%
NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors.CVE-2003-1596novellnetware+1EPSS score2.04%
NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session.CVE-2003-0639novellichainEPSS score1.25%
Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages without authentication.CVE-2003-0637novellichainEPSS score1.48%
Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.CVE-2003-0976novellnetwareEPSS score1.46%
NFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host.CVE-2003-0562novellnetwareEPSS score14.28%
Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service (ABEND) via a long input string.CVE-2003-0638novellichainEPSS score2.51%
Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial of service (ABEND) and possibly execute arbitrary code via (1) a long user name or (2) an unknown attack related to a "special script against login."CVE-2003-0635novellichainEPSS score1.08%
Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly related to unauthorized access to (1) NCPIP.NLM and (2) JSTCP.NLM.CVE-2003-0636novellichainEPSS score1.18%
Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites.CVE-2013-2770novellkanakaEPSS score0.59%
The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server (OES) on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate.CVE-2013-2016debianqemu+5EPSS score0.51%
A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu address space and thus increase their privileges on the host.CVE-2013-1379adobeadobe_air+4EPSS score6.23%
Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 do not properly initialize pointer arrays, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.CVE-2013-1085novellgroupwise_messenger+1EPSS score5.59%
Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers to execute arbitrary code via an import command containing a long string in the filename parameter.CVE-2013-1079novellzenworks_configuration_managementEPSS score2.35%
Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web page that also calls the Initialize method.