Novell kayıtları
Novell üreticisine ait 677 yayımlanmış kayıt. Bunların 3 tanesi sahada sömürüldü (CISA KEV listesinde), 48 tanesi için hazır saldırı aracı var.
Araştırmacı profili
- KEV’e giren
- 3 · %0,4
- Silahlaştırılmış
- 48 · %7,1
- Pre-auth RCE
- 177
- Düzeltme kaydı olan
- %23,6
- Yayından KEV’e ortanca
- 2683 gün
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer108
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')52
- CWE-264 Permissions, Privileges, and Access Controls41
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor32
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')26
- CWE-20 Improper Input Validation26
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
677 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
99Hemen | CVE-2014-6271Silahlaştırılmış | GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attacgnu · bash · CWE-78 | Kritik9,8KEV | %99,924 Eyl 2014 |
99Hemen | CVE-2014-7169Silahlaştırılmış | GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variablgnu · bash · CWE-78 | Kritik9,8KEV | %99,924 Eyl 2014 |
91Hemen | CVE-2015-3043Silahlaştırılmış | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attadobe · flash player · CWE-787 | Kritik9,8KEV | %73,814 Nis 2015 |
67Bu hafta | CVE-2017-14492Kavram kanıtı | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code viacanonical · ubuntu linux · CWE-119 | Kritik9,8 | %94,42 Eki 2017 |
66Bu hafta | CVE-2015-0240Silahlaştırılmış | The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x beforsamba · samba · CWE-17 | Kritik10,0 | %88,123 Şub 2015 |
63Bu hafta | CVE-2013-1080Silahlaştırılmış | The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenovell · zenworks configuration management · CWE-287 | Kritik10,0 | %77,029 Mar 2013 |
62Bu hafta | CVE-2015-0779Silahlaştırılmış | Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote anovell · zenworks configuration management · CWE-22 | Kritik10,0 | %74,37 Haz 2015 |
62Bu hafta | CVE-2006-0992Silahlaştırılmış | Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a lnovell · groupwise messenger | Kritik10,0 | %73,314 Nis 2006 |
62Bu hafta | CVE-2010-5324Silahlaştırılmış | Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 bnovell · zenworks configuration management · CWE-22 | Kritik10,0 | %71,87 Haz 2015 |
61Bu hafta | CVE-2024-12084Kavram kanıtı | Rsync: heap buffer overflow in rsync due to improper checksum length handlingsamba · rsync · CWE-122 | Kritik9,8 | %72,515 Oca 2025 |
61Bu hafta | CVE-2011-2653Silahlaştırılmış | Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute anovell · zenworks asset management · CWE-22 | Kritik10,0 | %71,38 Ara 2011 |
61Bu hafta | CVE-2012-4959Silahlaştırılmış | Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 13novell · file reporter · CWE-22 | Kritik10,0 | %71,118 Kas 2012 |
61Bu hafta | CVE-2011-3176Silahlaştırılmış | Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers novell · zenworks configuration management · CWE-119 | Kritik10,0 | %70,09 Nis 2012 |
60Bu hafta | CVE-2014-3566Silahlaştırılmış | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for manopenssl · openssl · CWE-310 | Düşük3,4 | %99,914 Eki 2014 |
60Bu hafta | CVE-2011-3175Silahlaştırılmış | Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers novell · zenworks configuration management · CWE-119 | Kritik10,0 | %66,09 Nis 2012 |
60Bu hafta | CVE-2009-1350Silahlaştırılmış | Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by estanovell · netidentity client1.2.3 · CWE-20 | Kritik10,0 | %65,921 Nis 2009 |
60Bu hafta | CVE-2008-0935Silahlaştırılmış | Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.34 allows remote attnovell · iprint · CWE-119 | Kritik10,0 | %65,125 Şub 2008 |
58Planlayın | CVE-2008-2703Silahlaştırılmış | Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to exenovell · groupwise messenger · CWE-119 | Kritik10,0 | %61,113 Haz 2008 |
56Planlayın | CVE-2017-14495Kavram kanıtı | Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause acanonical · ubuntu linux · CWE-772 | Yüksek7,5 | %85,42 Eki 2017 |
56Planlayın | CVE-2006-5478Silahlaştırılmış | Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e Fnovell · edirectory · CWE-119 | Yüksek7,5 | %85,124 Eki 2006 |
54Planlayın | CVE-2006-6424Silahlaştırılmış | Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to novell · netmail | Kritik9,0 | %60,326 Ara 2006 |
53Planlayın | CVE-2012-4958Silahlaştırılmış | Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /Fnovell · file reporter · CWE-22 | Yüksek7,8 | %73,518 Kas 2012 |
53Planlayın | CVE-2006-6425Silahlaştırılmış | Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbinovell · netmail | Kritik9,0 | %58,126 Ara 2006 |
52Planlayın | CVE-2008-2431İstismar yok | Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calling the Novell iPrint novell · iprint · CWE-119 | Kritik9,3 | %51,025 Kas 2008 |
51Planlayın | CVE-2017-14496Kavram kanıtı | Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specicanonical · ubuntu linux · CWE-191 | Yüksek7,5 | %68,42 Eki 2017 |
- CVE-2014-627199Hemen
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99gnu · bash24 Eyl 2014
- CVE-2014-716999Hemen
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variabl
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99gnu · bash24 Eyl 2014
- CVE-2015-304391Hemen
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows att
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %73adobe · flash player14 Nis 2015
- CVE-2017-1449267Bu hafta
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via
KritikCVSS 9,8Kavram kanıtıEPSS %94canonical · ubuntu linux2 Eki 2017
- CVE-2015-024066Bu hafta
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x befor
KritikCVSS 10,0SilahlaştırılmışEPSS %88samba · samba23 Şub 2015
- CVE-2013-108063Bu hafta
The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for ze
KritikCVSS 10,0SilahlaştırılmışEPSS %77novell · zenworks configuration management29 Mar 2013
- CVE-2015-077962Bu hafta
Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote a
KritikCVSS 10,0SilahlaştırılmışEPSS %74novell · zenworks configuration management7 Haz 2015
- CVE-2006-099262Bu hafta
Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a l
KritikCVSS 10,0SilahlaştırılmışEPSS %73novell · groupwise messenger14 Nis 2006
- CVE-2010-532462Bu hafta
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 b
KritikCVSS 10,0SilahlaştırılmışEPSS %71novell · zenworks configuration management7 Haz 2015
- CVE-2024-1208461Bu hafta
Rsync: heap buffer overflow in rsync due to improper checksum length handling
KritikCVSS 9,8Kavram kanıtıEPSS %72samba · rsync15 Oca 2025
- CVE-2011-265361Bu hafta
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute a
KritikCVSS 10,0SilahlaştırılmışEPSS %71novell · zenworks asset management8 Ara 2011
- CVE-2012-495961Bu hafta
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 13
KritikCVSS 10,0SilahlaştırılmışEPSS %71novell · file reporter18 Kas 2012
- CVE-2011-317661Bu hafta
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers
KritikCVSS 10,0SilahlaştırılmışEPSS %70novell · zenworks configuration management9 Nis 2012
- CVE-2014-356660Bu hafta
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man
DüşükCVSS 3,4SilahlaştırılmışEPSS %99openssl · openssl14 Eki 2014
- CVE-2011-317560Bu hafta
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers
KritikCVSS 10,0SilahlaştırılmışEPSS %66novell · zenworks configuration management9 Nis 2012
- CVE-2009-135060Bu hafta
Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by esta
KritikCVSS 10,0SilahlaştırılmışEPSS %65novell · netidentity client1.2.321 Nis 2009
- CVE-2008-093560Bu hafta
Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.34 allows remote att
KritikCVSS 10,0SilahlaştırılmışEPSS %65novell · iprint25 Şub 2008
- CVE-2008-270358Planlayın
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to exe
KritikCVSS 10,0SilahlaştırılmışEPSS %61novell · groupwise messenger13 Haz 2008
- CVE-2017-1449556Planlayın
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a
YüksekCVSS 7,5Kavram kanıtıEPSS %85canonical · ubuntu linux2 Eki 2017
- CVE-2006-547856Planlayın
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e F
YüksekCVSS 7,5SilahlaştırılmışEPSS %85novell · edirectory24 Eki 2006
- CVE-2006-642454Planlayın
Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to
KritikCVSS 9,0SilahlaştırılmışEPSS %60novell · netmail26 Ara 2006
- CVE-2012-495853Planlayın
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /F
YüksekCVSS 7,8SilahlaştırılmışEPSS %73novell · file reporter18 Kas 2012
- CVE-2006-642553Planlayın
Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbi
KritikCVSS 9,0SilahlaştırılmışEPSS %58novell · netmail26 Ara 2006
- CVE-2008-243152Planlayın
Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calling the Novell iPrint
KritikCVSS 9,3İstismar yokEPSS %51novell · iprint25 Kas 2008
- CVE-2017-1449651Planlayın
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is speci
YüksekCVSS 7,5Kavram kanıtıEPSS %68canonical · ubuntu linux2 Eki 2017