Data Synchronizer (Novell) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2025-08-21. Vendor: Novell.

CVEs of Data Synchronizer

• CVE-2010-20107 - CVSS 8.5 (high), 2025-08-21: A stack-based buffer overflow exists in FTP Synchronizer Professional <= v4.0.73.274. When the client connects to an FTP server and issues a LIST…
• CVE-2011-3014 - CVSS 5 (medium), 2011-08-09: The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it…
• CVE-2011-3013 - CVSS 5 (medium), 2011-08-09: WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote…
• CVE-2011-2221 - CVSS 5 (medium), 2011-08-09: The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authentication and obtain…
• CVE-2011-2224 - CVSS 4.3 (medium), 2011-08-09: The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it…
• CVE-2011-2223 - CVSS 5 (medium), 2011-08-09: The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers…
• CVE-2011-2222 - CVSS 4.3 (medium), 2011-08-09: Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to…
• CVE-2011-1711 - CVSS 5.5 (medium), 2011-06-09: Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote…