← Back

Novell

novell

657 CVEs • 111 products

Products (111)

Click to collapse
Toggle
Groupwise
groupwise
Netware
netware
Edirectory
edirectory
Iprint
iprint
Suse Linux
suse_linux
Netmail
netmail
Client
client
Imanager
imanager
Ichain
ichain
Bordermanager
bordermanager
Linux Desktop
linux_desktop
File Reporter
file_reporter
Mobility Pack
mobility_pack
Zenworks
zenworks
Suse Manager
suse_manager
Filr
filr
Iprint Client
iprint_client
Moonlight
moonlight
Leap
leap
Service Desk
service_desk
Web Server
web_server
Netmail Xe
netmail_xe
Emframe
emframe
Securelogin
securelogin
Teaming
teaming
Vibe Onprem
vibe_onprem
Messenger
messenger
Suse Cloud
suse_cloud
Web Search
web_search
Nsure Audit
nsure_audit
Imonitor
imonitor
Opensuse Swamp
opensuse_swamp
Apparmor
apparmor
Novell Forum
novell_forum
Cloud Manager
cloud_manager
Unixware
unixware
Kanaka
kanaka
Libzypp
libzypp

CVEs (657)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Novell
1Zenworks Configuration Management
Apr 29, 2026
Apr 9, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x4c request.
1Novell
1Zenworks Configuration Management
Apr 29, 2026
Apr 9, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x6c request.
1Novell
1Groupwise
Apr 29, 2026
Mar 2, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via a long e-mail address in an Address Bo...Show more
The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via a long e-mail address in an Address Book (aka .NAB) file.Show less
1Novell
1Iprint
Apr 29, 2026
Feb 21, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a long realm field, a different vulnerability than CVE...Show more
Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a long realm field, a different vulnerability than CVE-2011-3173.Show less
1Novell
1Iprint
Apr 29, 2026
Feb 21, 2012
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url, a different vulnerabil...Show more
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url, a different vulnerability than CVE-2011-1705.Show less
1Novell
1Iprint
Apr 29, 2026
Feb 21, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
The GetPrinterURLList2 method in the ActiveX control in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vecto...Show more
The GetPrinterURLList2 method in the ActiveX control in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2008-2431 and CVE-2008-2436.Show less
1Novell
1Open Enterprise Server
Apr 29, 2026
Feb 2, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 (OES2) through SP3 on Linux allows remote attackers to execute arbitrary code via a crafted attributes-natural-language field.
1Novell
1Xtier Framework
Apr 29, 2026
Dec 31, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple integer overflows in the HTTP server in the Novell XTier framework 3.1.8 allow remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables...Show more
Multiple integer overflows in the HTTP server in the Novell XTier framework 3.1.8 allow remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables.Show less
1Novell
1Sentinel Log Manager
Apr 29, 2026
Dec 29, 2011
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users to read arbitrary fi...Show more
Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users to read arbitrary files via a .. (dot dot) in the filename parameter.Show less
1Novell
2Groupwise Messenger
Messenger
Apr 29, 2026
Dec 8, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted command.
1Novell
1Zenworks Asset Management
Apr 29, 2026
Dec 8, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary code by uploading an executable file.
1Novell
1Netware
Apr 29, 2026
Nov 30, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service (abend or NFS outage) via long packets.
1Novell
1Iprint Open Enterprise Server 2
Apr 29, 2026
Nov 30, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in the GetDriverSettings function in nipplib.dll in the iPrint client in Novell Open Enterprise Server 2 (aka OES2) SP3 allows remote attackers to execute arbitrary code via a long (1) hostnam...Show more
Stack-based buffer overflow in the GetDriverSettings function in nipplib.dll in the iPrint client in Novell Open Enterprise Server 2 (aka OES2) SP3 allows remote attackers to execute arbitrary code via a long (1) hostname or (2) port field.Show less
1Novell
1Zenworks Handheld Management
Apr 29, 2026
Oct 24, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2655.
1Novell
1Zenworks Handheld Management
Apr 29, 2026
Oct 24, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2656.
1Novell
1Groupwise
Apr 29, 2026
Oct 8, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message...Show more
Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message.Show less
1Novell
1Groupwise
Apr 29, 2026
Oct 8, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR...Show more
Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail message.Show less
1Novell
1Groupwise
Apr 29, 2026
Oct 8, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1) Directory.Item.name or (2) Directory.Item.disp...Show more
Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1) Directory.Item.name or (2) Directory.Item.displayName parameter.Show less
1Novell
2Identity Manager Roles Based Provisioning Module
Identity Manager User Application
Apr 29, 2026
Oct 8, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based Provisioning Module 3.6.0, 3.6.1, 3.7.0, and 4...Show more
Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based Provisioning Module 3.6.0, 3.6.1, 3.7.0, and 4.0.0, allows remote attackers to inject arbitrary web script or HTML via the apwaDetail (aka apwaDetailId) parameter, aka Bug 709603.Show less
1Novell
1Groupwise
Apr 29, 2026
Oct 8, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, a different vulnerability than CVE-...Show more
Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, a different vulnerability than CVE-2011-2218.Show less