Novell Filr
6 CVEs affecting Novell Filr. Latest disclosed: 2016-08-01. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-1608 | High | 8.8 | 2016-08-01 | vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via… |
CVE-2016-1611 | High | 7.8 | 2016-08-01 | Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain pr… |
CVE-2016-1610 | High | 7.5 | 2016-08-01 | Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote atta… |
CVE-2016-1607 | High | 7.2 | 2016-08-01 | Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow remote attackers t… |
CVE-2015-5968 | Medium | 6.1 | 2016-03-18 | Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. |
CVE-2016-1609 | Medium | 5.4 | 2016-08-01 | Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated use… |