Novell

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-2616 1Novell 1Netmail Apr 23, 2026 May 11, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlier allows remote attackers to execute arbitrary code via a crafted request.
CVE-2007-2476 1Novell 1Securelogin Apr 23, 2026 May 2, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to Active Directory (AD) password changes.
CVE-2007-2475 1Novell 1Securelogin Apr 23, 2026 May 2, 2007 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Unspecified vulnerability in the ADSCHEMA utility in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to granting "users excess permissions to their own attributes."
CVE-2006-4520 1Novell 1Edirectory Apr 23, 2026 Apr 30, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service (daemon crash) when the he...Show more ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service (daemon crash) when the heap is written to a log file.Show less
CVE-2007-2171 1Novell 1Groupwise Apr 23, 2026 Apr 24, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authen...Show more Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.Show less
CVE-2007-1350 1Novell 1Netmail Apr 23, 2026 Mar 8, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username during HTTP Basic authentication.
CVE-2006-7155 1Novell 1Bordermanager Apr 23, 2026 Mar 7, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue m...Show more Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-5286.Show less
CVE-2007-1309 1Novell 1Access Manager Apr 23, 2026 Mar 7, 2007 N/A· v4 N/A· v3 9.0 HIGH· v2 Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt.
CVE-2007-1285 5Canonical NovellPhp+2 more 7Enterprise Linux Desktop Enterprise Linux ServerEnterprise Linux Workstation+4 more Apr 23, 2026 Mar 6, 2007 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable...Show more The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.Show less
CVE-2007-1119 1Novell 1Zenworks Apr 23, 2026 Feb 27, 2007 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Unspecified vulnerability in Novell ZENworks 7 Desktop Management Support Pack 1 before Hot patch 3 (ZDM7SP1HP3) allows remote attackers to upload images to certain folders that were not configured in the "Only allow upl...Show more Unspecified vulnerability in Novell ZENworks 7 Desktop Management Support Pack 1 before Hot patch 3 (ZDM7SP1HP3) allows remote attackers to upload images to certain folders that were not configured in the "Only allow uploads to the following directories" setting via unspecified vectors.Show less
CVE-2007-0110 1Novell 1Access Manager Identity Server Apr 23, 2026 Jan 9, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 allows remote attackers to inject arbitrary web script or HTML via the IssueInstant parameter, which is...Show more Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 allows remote attackers to inject arbitrary web script or HTML via the IssueInstant parameter, which is not properly handled in the resulting error message.Show less
CVE-2007-0108 1Novell 1Client Apr 23, 2026 Jan 9, 2007 N/A· v4 N/A· v3 6.0 MEDIUM· v2 nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles.
CVE-2006-4220 1Novell 2Groupwise Groupwise Webaccess Apr 23, 2026 Dec 31, 2006 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote attackers to inject arbitrary web script or HTML via the (1) User.html, (2) Err...Show more Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote attackers to inject arbitrary web script or HTML via the (1) User.html, (2) Error, (3) User.Theme.index, and (4) and User.lang parameters.Show less
CVE-2006-6762 1Novell 1Netmail Apr 23, 2026 Dec 27, 2006 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to cause a denial of service via an APPEND command with a single "(" (parenthesis) in the argument.
CVE-2006-6761 1Novell 1Netmail Apr 23, 2026 Dec 27, 2006 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via a long argument to the SUBSCRIBE command.
CVE-2006-6425 1Novell 1Netmail Apr 23, 2026 Dec 27, 2006 N/A· v4 N/A· v3 9.0 HIGH· v2 Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via unspecified vectors involving the APPEND command.
CVE-2006-6424 1Novell 1Netmail Apr 23, 2026 Dec 27, 2006 N/A· v4 N/A· v3 9.0 HIGH· v2 Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resul...Show more Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow; and (2) via crafted arguments to the STOR command to the Network Messaging Application Protocol (NMAP) daemon, resulting in a stack overflow.Show less
CVE-2006-6675 1Novell 2Apache Http Server Netware Apr 23, 2026 Dec 21, 2006 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome...Show more Cross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app.Show less
CVE-2006-6450 1Novell 1Zenworks Patch Management Server Apr 23, 2026 Dec 10, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass par...Show more Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters.Show less
CVE-2006-6443 1Novell 1Client Apr 23, 2026 Dec 10, 2006 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the Novell Distributed Print Services (NDPS) Print Provider for Windows component (NDPPNT.DLL) in Novell Client 4.91 has unknown impact and remote attack vectors.

Previous 1...242526...33 Next