| CVE-2015-6815 | NIEDRIG3.5 | The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors. | 31/01/2020 |
| CVE-2012-6345 | HOCH7.5 | Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information. | 25/01/2020 |
| CVE-2012-6344 | MITTEL6.1 | Novell ZENworks Configuration Management before 11.2.4 allows XSS. | 25/01/2020 |
| CVE-2013-2016 | HOCH7.8 | A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu address space and thus in | 30/12/2019 |
| CVE-2019-13730 | HOCH8.8 | Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 10/12/2019 |
| CVE-2019-9811 | HOCH8.3 | As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8. | 23/07/2019 |
| CVE-2019-11717 | MITTEL5.3 | A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8. | 23/07/2019 |
| CVE-2019-11338 | HOCH8.8 | libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data. | 19/04/2019 |
| CVE-2017-9277 | HOCH7.5 | The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA. | 02/03/2018 |
| CVE-2017-9267 | HOCH7.5 | In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations. | 02/03/2018 |
| CVE-2017-8932 | MITTEL5.9 | A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted poi | 06/07/2017 |
| CVE-2016-9961 | KRITISCH9.8 | game-music-emu before 0.6.1 mishandles unspecified integer values. | 06/06/2017 |
| CVE-2016-9960 | MITTEL5.5 | game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash). | 06/06/2017 |
| CVE-2017-7432 | KRITISCH9.8 | Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability. | 03/05/2017 |
| CVE-2017-7431 | HOCH8.8 | Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management. | 03/05/2017 |
| CVE-2017-7430 | MITTEL6.1 | Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework. | 03/05/2017 |
| CVE-2017-5186 | HOCH7.5 | Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 (9.0.2.2) use the deprecated MD5 hashing algorithm in a communications certificate. | 27/04/2017 |
| CVE-2016-5762 | KRITISCH9.8 | Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1) username or (2) password, which triggers a heap-based buffer overflow. | 20/04/2017 |
| CVE-2016-5761 | MITTEL6.1 | Cross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allows remote attackers to inject arbitrary web script or HTML via a crafted email. | 20/04/2017 |
| CVE-2016-5760 | MITTEL6.1 | Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject arbitrary web script or HTML via the (1) token parameter to gwadmin-console/install/login.jsp or (2) PATH_INFO to gwadmin-console/index.jsp. | 20/04/2017 |