Novell - vulnerabilities (CVEs)
657 CVEs in 118 products, 0 in the last 30 days, newest from 2025-08-21.
Products
- Suse Linux Enterprise Server - 91 CVEs
- Suse Linux Enterprise Desktop - 83 CVEs
- Groupwise - 74 CVEs
- Netware - 70 CVEs
- Suse Linux Enterprise Software Development Kit - 64 CVEs
- Edirectory - 51 CVEs
- Zenworks Configuration Management - 35 CVEs
- Suse Linux Enterprise Real Time Extension - 33 CVEs
- Iprint - 30 CVEs
- Suse Linux Enterprise Debuginfo - 24 CVEs
- Suse Linux Enterprise Workstation Extension - 23 CVEs
- Suse Linux Enterprise Live Patching - 21 CVEs
- Suse Linux Enterprise Module For Public Cloud - 21 CVEs
- Netmail - 17 CVEs
- Netware Ftp Server - 17 CVEs
- Suse Linux - 17 CVEs
- Suse Package Hub For Suse Linux Enterprise - 17 CVEs
- Client - 16 CVEs
- Imanager - 16 CVEs
- Open Enterprise Server - 16 CVEs
- Ichain - 14 CVEs
- Bordermanager - 13 CVEs
- Suse Studio Onsite - 12 CVEs
- Linux Desktop - 11 CVEs
- Data Synchronizer - 8 CVEs
- File Reporter - 7 CVEs
- Groupwise Webaccess - 7 CVEs
- Mobility Pack - 7 CVEs
- Access Manager - 6 CVEs
- Filr - 6 CVEs
- Groupwise Messenger - 6 CVEs
- Identity Manager Roles Based Provisioning Module - 6 CVEs
- Zenworks - 6 CVEs
- Iprint Client - 5 CVEs
- Leap - 5 CVEs
- Moonlight - 5 CVEs
- Suse Lifecycle Management Server - 5 CVEs
- Suse Manager - 5 CVEs
- Identity Manager - 4 CVEs
- Service Desk - 4 CVEs
- Zenworks Handheld Management - 4 CVEs
- Netware Client - 3 CVEs
- Suse Linux Enterprise Module For Web Scripting - 3 CVEs
- Suse Openstack Cloud - 3 CVEs
- Zenworks Asset Management - 3 CVEs
- Zenworks Desktops - 3 CVEs
- Client Firewall - 2 CVEs
- Emframe - 2 CVEs
- Identity Manager User Application - 2 CVEs
- Messenger - 2 CVEs
- Netmail Xe - 2 CVEs
- Novell Client For Windows - 2 CVEs
- Opensuse Build Service - 2 CVEs
- Securelogin - 2 CVEs
- Sentinel Log Manager - 2 CVEs
- Small Business Suite - 2 CVEs
- Suse Cloud - 2 CVEs
- Suse Linux Enterprise Module For Legacy Software - 2 CVEs
- Suse Linux Enterprise Point Of Sale - 2 CVEs
- Suse Linux For Vmware - 2 CVEs
- Suse Linux Sdk - 2 CVEs
- Suse Manager Proxy - 2 CVEs
- Teaming - 2 CVEs
- Vibe Onprem - 2 CVEs
- Web Server - 2 CVEs
- Zenworks Desktop Management - 2 CVEs
- Zenworks Mobile Management - 2 CVEs
- Zenworks Patch Management Server - 2 CVEs
- Zenworks Servers - 2 CVEs
- Access Manager Identity Server - 1 CVEs
- Apache Http Server - 1 CVEs
- Apparmor - 1 CVEs
- Challenge Response Client - 1 CVEs
- Client Login Extension (cle) - 1 CVEs
- Cloud Manager - 1 CVEs
- Extend Director - 1 CVEs
- File Reporter Engine - 1 CVEs
- Http Server - 1 CVEs
- Identity Manager Identity Applications - 1 CVEs
- Imonitor - 1 CVEs
- Internet Messaging System - 1 CVEs
- Iprint Open Enterprise Server - 1 CVEs
- Iprint Open Enterprise Server 2 - 1 CVEs
- Kanaka - 1 CVEs
- Libzypp - 1 CVEs
- Modular Authentication Service - 1 CVEs
- Netidentity Client1.2.3 - 1 CVEs
- Netiq Idm Servicenow Driver - 1 CVEs
- Novell Forum - 1 CVEs
- Nsure Audit - 1 CVEs
- Open Desktop Server - 1 CVEs
- Open Enterprise Server 11 - 1 CVEs
- Open Enterprise Server 2015 - 1 CVEs
- Opensuse Factory - 1 CVEs
- Opensuse Leap - 1 CVEs
- Opensuse Swamp - 1 CVEs
- Suse Audit Log Keeper - 1 CVEs
- Suse Linux Enterprise - 1 CVEs
- Suse Linux Enterprise For Sap Applications - 1 CVEs
- Suse Linux Enterprise Server For Sap - 1 CVEs
- Unixware - 1 CVEs
- User Application - 1 CVEs
- Web Search - 1 CVEs
- Xtier Framework - 1 CVEs
- Zenworks Configuration Manager - 1 CVEs
- Zenworks Endpoint Security Management - 1 CVEs
- Zenworks Patch Management Update Agent - 1 CVEs
- Zenworks Remote Management - 1 CVEs
- Zenworks Server Management - 1 CVEs
- Groupwise Enhancement Pack - 0 CVEs
- Gtk# For .net - 0 CVEs
- Netware Enterprise Web Server - 0 CVEs
- Open Enterprise - 0 CVEs
- Opensuse - 0 CVEs
- Opensuse Swamp Workflow Administration Management - 0 CVEs
- Suse Linux Software Development Kit - 0 CVEs
- Web Server Examples Toolkit - 0 CVEs
- Webyast Appliance - 0 CVEs
Newest CVEs of Novell
- CVE-2010-20107 - CVSS 8.5 (high), 2025-08-21: A stack-based buffer overflow exists in FTP Synchronizer Professional <= v4.0.73.274. When the client connects to an FTP server and issues a LIST…
- CVE-2024-12084 - CVSS 9.8 (critical), 2025-01-15: A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in…
- CVE-2024-12088 - CVSS 7.5 (high), 2025-01-14: A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server…
- CVE-2020-8118 - CVSS 5 (medium), 2020-02-04: An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the…
- CVE-2015-6815 - CVSS 3.5 (low), 2020-01-31: The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which…
- CVE-2012-6344 - CVSS 6.1 (medium), 2020-01-25: Novell ZENworks Configuration Management before 11.2.4 allows XSS.
- CVE-2012-6345 - CVSS 7.5 (high), 2020-01-25: Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.
- CVE-2013-4357 - CVSS 7.5 (high), 2019-12-31: The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service.
- CVE-2013-2016 - CVSS 7.8 (high), 2019-12-30: A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio…
- CVE-2019-13730 - CVSS 8.8 (high), 2019-12-10: Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2019-9811 - CVSS 8.3 (high), 2019-07-23: As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that…
- CVE-2019-11717 - CVSS 5.3 (medium), 2019-07-23: A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible…
- CVE-2019-11338 - CVSS 8.8 (high), 2019-04-19: libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL…
- CVE-2017-9277 - CVSS 7.5 (high), 2018-03-02: The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA.
- CVE-2017-9267 - CVSS 7.5 (high), 2018-03-02: In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND…
- CVE-2017-14494 - CVSS 5.9 (medium), 2017-10-03: dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6…
- CVE-2017-14496 - CVSS 7.5 (high), 2017-10-03: Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows…
- CVE-2017-13704 - CVSS 7.5 (high), 2017-10-03: In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an…
- CVE-2016-5759 - CVSS 7.8 (high), 2017-09-08: The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
- CVE-2015-0780 - CVSS 9.8 (critical), 2017-08-09: SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote…
- CVE-2015-0783 - CVSS 6.5 (medium), 2017-08-09: The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.
- CVE-2015-0786 - CVSS 9.8 (critical), 2017-08-09: Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote…
- CVE-2015-0782 - CVSS 9.8 (critical), 2017-08-09: SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to…
- CVE-2015-0785 - CVSS 7.5 (high), 2017-08-09: com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders…
- CVE-2015-0781 - CVSS 9.8 (critical), 2017-08-09: Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload…
- CVE-2015-0784 - CVSS 7.5 (high), 2017-08-09: Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for…
- CVE-2015-5219 - CVSS 7.5 (high), 2017-07-21: The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote…
- CVE-2017-8932 - CVSS 5.9 (medium), 2017-07-06: A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect…
- CVE-2017-1000366 - CVSS 7.8 (high), 2017-06-19: glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting…
- CVE-2016-9960 - CVSS 5.5 (medium), 2017-06-06: game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
