| 2011-08-23 | CVE-2011-2648 | Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file. | 7.5 |
| 2011-08-23 | CVE-2011-2647 | Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list of testdrive modified files. | 7.5 |
| 2011-08-23 | CVE-2011-2646 | Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of testdrive modified files. | 7.5 |
| 2011-08-23 | CVE-2011-2645 | Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM. | 7.5 |
| 2011-08-23 | CVE-2011-2644 | Cross-Site Scripting vulnerability in multiple products
Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info display. | 4.3 |
| 2011-08-23 | CVE-2011-2226 | Cross-Site Scripting vulnerability in multiple products
Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a pattern listing. | 4.3 |
| 2011-08-23 | CVE-2011-2225 | Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh. | 9.3 |
| 2011-08-09 | CVE-2011-3014 | Permissions, Privileges, and Access Controls vulnerability in Novell Data Synchronizer and Mobility Pack
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation. | 5.0 |
| 2011-08-09 | CVE-2011-3013 | Cryptographic Issues vulnerability in Novell Data Synchronizer and Mobility Pack
WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain access via a brute-force attack. | 5.0 |
| 2011-08-09 | CVE-2011-2224 | Cross-Site Scripting vulnerability in Novell Data Synchronizer and Mobility Pack
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors. | 4.3 |