Novell

Filr

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2016-1611

  • EPSS 0.23%
  • Veröffentlicht 01.08.2016 02:59:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by replacing this file's content with arbitrary shell commands.

7.5

CVE-2016-1610

  • EPSS 20.78%
  • Veröffentlicht 01.08.2016 02:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote attackers to bypass intended access restrictions and write to arbitrary files via a .. (dot dot...

5.4

CVE-2016-1609

  • EPSS 1.36%
  • Veröffentlicht 01.08.2016 02:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input, as demonstrated by a crafted a...

9

CVE-2016-1608

  • EPSS 10.81%
  • Veröffentlicht 01.08.2016 02:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ntpServer parameter.

7.2

CVE-2016-1607

  • EPSS 0.97%
  • Veröffentlicht 01.08.2016 02:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow remote attackers to hijack the authentication of administrators, as demonstrated by reconfiguring time settin...

6.1

CVE-2015-5968

  • EPSS 0.24%
  • Veröffentlicht 18.03.2016 10:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.