Filr (Novell) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2016-08-01. Vendor: Novell.

CVEs of Filr

• CVE-2016-1611 - CVSS 7.8 (high), 2016-08-01: Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain…
• CVE-2016-1610 - CVSS 7.5 (high), 2016-08-01: Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote…
• CVE-2016-1609 - CVSS 5.4 (medium), 2016-08-01: Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated…
• CVE-2016-1608 - CVSS 8.8 (high), 2016-08-01: vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via…
• CVE-2016-1607 - CVSS 7.2 (high), 2016-08-01: Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow remote attackers…
• CVE-2015-5968 - CVSS 6.1 (medium), 2016-03-18: Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.