Open Enterprise Server (Novell) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 28 known versions, newest CVE from 2019-12-30. Vendor: Novell.
CVEs of Open Enterprise Server
- CVE-2013-2016 - CVSS 7.8 (high), 2019-12-30: A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio…
- CVE-2017-5182 - CVSS 7.5 (high), 2017-01-23: Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary file, via a specially crafted URL, that allows…
- CVE-2014-7169 - CVSS 9.8 (critical), 2014-09-25: GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows…
- CVE-2014-6271 - CVSS 9.8 (critical), 2014-09-24: GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute…
- CVE-2014-0609 - CVSS 10 (critical), 2014-08-17: Unspecified vulnerability in Novell Open Enterprise Server (OES) 11 SP1 before Scheduled Maintenance Update 9415 and 11 SP2 before Scheduled Maintenance…
- CVE-2014-0598 - CVSS 10 (critical), 2014-06-18: Directory traversal vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux has unspecified impact and…
- CVE-2014-0599 - CVSS 4.3 (medium), 2014-06-18: Cross-site scripting (XSS) vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux allows remote…
- CVE-2014-0595 - CVSS 2.6 (low), 2014-05-08: /opt/novell/ncl/bin/nwrights in Novell Client for Linux in Novell Open Enterprise Server (OES) 11 Linux SP2 does not properly manage a certain array, which…
- CVE-2013-3707 - CVSS 4.3 (medium), 2013-12-01: The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 (OES 2) Linux, and OES 11 Linux Gold and SP1, does…
- CVE-2011-4194 - CVSS 7.5 (high), 2012-02-02: Buffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 (OES2) through SP3 on Linux allows remote attackers to execute arbitrary code via a…
- CVE-2009-0115 - CVSS 7.8 (high), 2009-03-30: The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES),…
- CVE-2009-0611 - CVSS 4.3 (medium), 2009-02-17: Multiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enterprise Server 1.x allow remote attackers…
- CVE-2008-5021 - CVSS 9.3 (critical), 2008-11-13: nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote…
- CVE-2006-0997 - CVSS 5 (medium), 2006-03-23: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in…
- CVE-2006-0999 - CVSS 5 (medium), 2006-03-23: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak…
- CVE-2006-0998 - CVSS 5 (medium), 2006-03-23: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an…
- CVE-2006-0736 - CVSS 10 (critical), 2006-02-27: Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allows remote attackers…
- CVE-2005-3655 - CVSS 7.5 (high), 2005-12-31: Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to…
- CVE-2005-1767 - CVSS 2.1 (low), 2005-08-05: traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops…
- CVE-2005-1761 - CVSS 2.1 (low), 2005-08-05: Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function.
