Novell

Open Enterprise Server

16 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2009-0611

Exploit
  • EPSS 5.36%
  • Published 17.02.2009 17:30:06
  • Last modified 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enterprise Server 1.x allow remote attackers to inject arbitrary web script or HTML via (1) the siteloc parameter in a displayaddsite ac...

9.3

CVE-2008-5021

  • EPSS 25.26%
  • Published 13.11.2008 11:30:01
  • Last modified 09.04.2025 00:30:58

nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying pr...

5

CVE-2006-0997

  • EPSS 0.27%
  • Published 23.03.2006 11:06:00
  • Last modified 03.04.2025 01:03:51

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by snif...

5

CVE-2006-0998

  • EPSS 0.56%
  • Published 23.03.2006 11:06:00
  • Last modified 03.04.2025 01:03:51

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL pr...

5

CVE-2006-0999

  • EPSS 0.46%
  • Published 23.03.2006 11:06:00
  • Last modified 03.04.2025 01:03:51

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow r...

10

CVE-2006-0736

  • EPSS 28.47%
  • Published 27.02.2006 20:06:00
  • Last modified 03.04.2025 01:03:51

Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allows remote attackers to execute arbitrary code via unspecified vectors.