FI
Product
Filr
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 2Low 0
Watch
Add Filr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1608 | 8.8 | Aug 1 | vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via shell metacharacters… Affected: through 1.2; through 2.0 |
| CVE-2016-1611 | 7.8 | Aug 1 | Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by… Affected: through 1.2; through 2.0 |
| CVE-2016-1610 | 7.5 | Aug 1 | Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote attackers to bypass… Affected: through 1.2; through 2.0 |
| CVE-2016-1607 | 7.2 | Aug 1 | Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow remote attackers to hijack the… Affected: through 1.2; through 2.0 |
Showing 4