← Back

Novell

novell

657 CVEs • 111 products

Products (111)

Click to collapse
Toggle
Groupwise
groupwise
Netware
netware
Edirectory
edirectory
Iprint
iprint
Suse Linux
suse_linux
Netmail
netmail
Client
client
Imanager
imanager
Ichain
ichain
Bordermanager
bordermanager
Linux Desktop
linux_desktop
File Reporter
file_reporter
Mobility Pack
mobility_pack
Zenworks
zenworks
Suse Manager
suse_manager
Filr
filr
Iprint Client
iprint_client
Moonlight
moonlight
Leap
leap
Service Desk
service_desk
Web Server
web_server
Netmail Xe
netmail_xe
Emframe
emframe
Securelogin
securelogin
Teaming
teaming
Vibe Onprem
vibe_onprem
Messenger
messenger
Suse Cloud
suse_cloud
Web Search
web_search
Nsure Audit
nsure_audit
Imonitor
imonitor
Opensuse Swamp
opensuse_swamp
Apparmor
apparmor
Novell Forum
novell_forum
Cloud Manager
cloud_manager
Unixware
unixware
Kanaka
kanaka
Libzypp
libzypp

CVEs (657)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Novell
2Data Synchronizer
Mobility Pack
Apr 29, 2026
Aug 9, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to hijack web sessions via unspecified vectors.
1Novell
2Data Synchronizer
Mobility Pack
Apr 29, 2026
Aug 9, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authentication and obtain sensitive GroupWise information via unspecified vectors.
1Novell
1File Reporter
Apr 29, 2026
Jul 17, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD.
1Novell
2File Reporter
File Reporter Engine
Apr 29, 2026
Jul 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD elem...Show more
Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element.Show less
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs cookie.
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs parameter in a printer-url.
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted iprint-client-config-info parameter in a printer-url.
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url.
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted core-package parameter in a printer-url.
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted driver-version parameter in a printer-url.
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted file-date-time parameter in a printer-url.
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-name parameter in a printer-url.
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-time parameter in a printer-url.
1Novell
1Iprint
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted uri parameter in a printer-url.
1Novell
2Data Synchronizer
Mobility Pack
Apr 29, 2026
Jun 9, 2011
N/A· v4
N/A· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access the accounts of other users via unknown v...Show more
Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access the accounts of other users via unknown vectors.Show less
2Novell
Rubyforge
2Rubygem Sqlite3
Suse Linux Enterprise
Apr 29, 2026
May 13, 2011
N/A· v4
N/A· v3
2.1 LOW· v2
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
1Novell
1Zenworks Configuration Management
Apr 29, 2026
Apr 18, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to...Show more
Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.Show less
2Novell
Pureftpd
2Pure Ftpd
Suse Linux
Apr 29, 2026
Apr 18, 2011
N/A· v4
N/A· v3
4.4 MEDIUM· v2
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overw...Show more
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.Show less
2Mono
Novell
2Mono
Moonlight
Apr 29, 2026
Apr 13, 2011
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related...Show more
Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance.Show less
2Mono
Novell
2Mono
Moonlight
Apr 29, 2026
Apr 13, 2011
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to fi...Show more
Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to finalizing and then resurrecting a DynamicMethod instance.Show less