FI
Product
Filr
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 2Low 0
Watch
Add Filr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1608 | 8.8 | Aug 1 | vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via shell metacharacters… Affected: through 1.2; through 2.0 |
| CVE-2016-1611 | 7.8 | Aug 1 | Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by… Affected: through 1.2; through 2.0 |
| CVE-2016-1610 | 7.5 | Aug 1 | Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote attackers to bypass… Affected: through 1.2; through 2.0 |
| CVE-2016-1607 | 7.2 | Aug 1 | Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow remote attackers to hijack the… Affected: through 1.2; through 2.0 |
| CVE-2015-5968 | 6.1 | Mar 18 | Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL Affected: through 1.2 |
| CVE-2016-1609 | 5.4 | Aug 1 | Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject… Affected: through 1.2; through 2.0 |
Showing 6