Login Request a demo
NO
Vendor
Novell
109 products with CVEs on record
992
CVEs
6
On KEV
0
New 30D
Products
ZC
Zenworks Configuration Management
Novell
9.8
35 CVEs2 on KEV0 new
OE
Open Enterprise Server
Novell
9.8
20 CVEs2 on KEV0 new
SL
Suse Linux Enterprise Desktop
Novell
9.8
83 CVEs1 on KEV0 new
SL
Suse Linux Enterprise Workstation Extension
Novell
9.8
24 CVEs1 on KEV0 new
SL
Suse Linux Enterprise Server
Novell
9.8
91 CVEs0 on KEV0 new
GR
Groupwise
Novell
9.8
74 CVEs0 on KEV0 new
NE
Netware
Novell
4.0
71 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Software Development Kit
Novell
9.8
65 CVEs0 on KEV0 new
ED
Edirectory
Novell
9.8
51 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Real Time Extension
Novell
9.8
33 CVEs0 on KEV0 new
IP
Iprint
Novell
8.8
30 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Debuginfo
Novell
8.4
24 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Live Patching
Novell
8.4
22 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Module For Public Cloud
Novell
8.4
22 CVEs0 on KEV0 new
NE
Netmail
Novell
–
17 CVEs0 on KEV0 new
NF
Netware Ftp Server
Novell
–
17 CVEs0 on KEV0 new
SL
Suse Linux
Novell
9.8
17 CVEs0 on KEV0 new
SP
Suse Package Hub For Suse Linux Enterprise
Novell
9.8
17 CVEs0 on KEV0 new
CL
Client
Novell
–
16 CVEs0 on KEV0 new
IM
Imanager
Novell
9.8
16 CVEs0 on KEV0 new
IC
Ichain
Novell
–
14 CVEs0 on KEV0 new
BO
Bordermanager
Novell
–
13 CVEs0 on KEV0 new
SS
Suse Studio Onsite
Novell
–
12 CVEs0 on KEV0 new
LD
Linux Desktop
Novell
7.8
11 CVEs0 on KEV0 new
DS
Data Synchronizer
Novell
–
7 CVEs0 on KEV0 new
FR
File Reporter
Novell
–
7 CVEs0 on KEV0 new
GW
Groupwise Webaccess
Novell
–
7 CVEs0 on KEV0 new
MP
Mobility Pack
Novell
–
7 CVEs0 on KEV0 new
AM
Access Manager
Novell
–
6 CVEs0 on KEV0 new
FI
Filr
Novell
8.8
6 CVEs0 on KEV0 new
GM
Groupwise Messenger
Novell
–
6 CVEs0 on KEV0 new
IM
Identity Manager Roles Based Provisioning Module
Novell
–
6 CVEs0 on KEV0 new
SM
Suse Manager
Novell
8.1
6 CVEs0 on KEV0 new
ZE
Zenworks
Novell
–
6 CVEs0 on KEV0 new
IC
Iprint Client
Novell
–
5 CVEs0 on KEV0 new
LE
Leap
Novell
7.5
5 CVEs0 on KEV0 new
MO
Moonlight
Novell
–
5 CVEs0 on KEV0 new
SL
Suse Lifecycle Management Server
Novell
–
5 CVEs0 on KEV0 new
IM
Identity Manager
Novell
5.4
4 CVEs0 on KEV0 new
SD
Service Desk
Novell
7.2
4 CVEs0 on KEV0 new
ZH
Zenworks Handheld Management
Novell
–
4 CVEs0 on KEV0 new
NC
Netware Client
Novell
–
3 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Module For Web Scripting
Novell
7.5
3 CVEs0 on KEV0 new
SO
Suse Openstack Cloud
Novell
8.1
3 CVEs0 on KEV0 new
ZA
Zenworks Asset Management
Novell
–
3 CVEs0 on KEV0 new
ZD
Zenworks Desktops
Novell
–
3 CVEs0 on KEV0 new
CF
Client Firewall
Novell
–
2 CVEs0 on KEV0 new
EM
Emframe
Novell
–
2 CVEs0 on KEV0 new
IM
Identity Manager User Application
Novell
–
2 CVEs0 on KEV0 new
ME
Messenger
Novell
–
2 CVEs0 on KEV0 new
NX
Netmail XE
Novell
–
2 CVEs0 on KEV0 new
NC
Novell Client For Windows
Novell
–
2 CVEs0 on KEV0 new
OB
Opensuse Build Service
Novell
–
2 CVEs0 on KEV0 new
SE
Securelogin
Novell
–
2 CVEs0 on KEV0 new
SL
Sentinel Log Manager
Novell
–
2 CVEs0 on KEV0 new
SB
Small Business Suite
Novell
–
2 CVEs0 on KEV0 new
SC
Suse Cloud
Novell
–
2 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Module For Legacy Software
Novell
8.1
2 CVEs0 on KEV0 new
SL
Suse Linux Enterprise Point OF Sale
Novell
7.8
2 CVEs0 on KEV0 new
SL
Suse Linux For Vmware
Novell
–
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2024-12084
SL
Suse Linux
Novell
9.8
73%
Jan 15Rsync: heap buffer overflow in rsync due to improper checksum length handling
CVE-2024-12088
SL
Suse Linux
Novell
7.5
5%
Jan 14Rsync: --safe-links option bypass leads to path traversal
CVE-2020-8118
SL
Suse Linux Enterprise Server
Novell
5.0
1%
Feb 4An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application
CVE-2015-6815
SL
Suse Linux Enterprise Software Development Kit
Novell
3.5
1%
Jan 31The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to…
CVE-2012-6345
ZC
Zenworks Configuration Management
Novell
7.5
1%
Jan 25Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information
CVE-2012-6344
ZC
Zenworks Configuration Management
Novell
6.1
1%
Jan 25Novell ZENworks Configuration Management before 11.2.4 allows XSS
CVE-2013-4357
SL
Suse Linux Enterprise Server
Novell
7.5
3%
Dec 31The eglibc package before 2.14 incorrectly handled the getaddrinfo() function
CVE-2013-2016
OD
Open Desktop Server
Novell
7.8
1%
Dec 30A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device
CVE-2019-13730
SP
Suse Package Hub For Suse Linux Enterprise
Novell
8.8
2%
Dec 10Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
CVE-2019-9811
SP
Suse Package Hub For Suse Linux Enterprise
Novell
8.3
3%
Jul 23As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised…
CVE-2019-11717
SP
Suse Package Hub For Suse Linux Enterprise
Novell
5.3
2%
Jul 23A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin…
CVE-2019-11338
SP
Suse Package Hub For Suse Linux Enterprise
Novell
8.8
2%
Apr 19libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference…
CVE-2017-9277
ED
Edirectory
Novell
7.5
1%
Mar 2The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA
CVE-2017-9267
ED
Edirectory
Novell
7.5
1%
Mar 2In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations
CVE-2017-14496
LE
Leap
Novell
7.5
68%
Oct 3Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause…
CVE-2017-14494
LE
Leap
Novell
5.9
70%
Oct 3dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests
CVE-2017-13704
LE
Leap
Novell
7.5
65%
Oct 3In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value
CVE-2016-5759
SL
Suse Linux Enterprise Desktop
Novell
7.8
0%
Sep 8The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root
CVE-2015-0786
ZC
Zenworks Configuration Management
Novell
9.8
24%
Aug 9Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute…
CVE-2015-0785
ZC
Zenworks Configuration Management
Novell
7.5
7%
Aug 9com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname…
CVE-2015-0784
ZC
Zenworks Configuration Management
Novell
7.5
7%
Aug 9Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance…
CVE-2015-0783
ZC
Zenworks Configuration Management
Novell
6.5
5%
Aug 9The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable
CVE-2015-0782
ZC
Zenworks Configuration Management
Novell
9.8
7%
Aug 9SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL…
CVE-2015-0781
ZC
Zenworks Configuration Management
Novell
9.8
4%
Aug 9Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute…
CVE-2015-0780
ZC
Zenworks Configuration Management
Novell
9.8
8%
Aug 9SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute…
CVE-2015-5219
LE
Leap
Novell
7.5
6%
Jul 21The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a…
CVE-2017-8932
SP
Suse Package Hub For Suse Linux Enterprise
Novell
5.9
2%
Jul 6A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated…
CVE-2017-1000366
SL
Suse Linux Enterprise Desktop
Novell
7.8
3%
Jun 19glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code…
CVE-2016-9961
SL
Suse Linux Enterprise Software Development Kit
Novell
9.8
4%
Jun 6game-music-emu before 0.6.1 mishandles unspecified integer values
CVE-2016-9960
SL
Suse Linux Enterprise Software Development Kit
Novell
5.5
1%
Jun 6game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash)
CVE-2017-7995
SL
Suse Linux Enterprise Point OF Sale
Novell
3.8
0%
May 3Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure
CVE-2017-7432
IM
Imanager
Novell
9.8
2%
May 3Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability
CVE-2017-7431
IM
Imanager
Novell
8.8
1%
May 3Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management
CVE-2017-7430
IM
Imanager
Novell
6.1
1%
May 3Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework
CVE-2017-5186
ED
Edirectory
Novell
7.5
1%
Apr 27Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2…
CVE-2016-5762
GR
Groupwise
Novell
9.8
6%
Apr 20Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1)…
CVE-2016-5761
GR
Groupwise
Novell
6.1
1%
Apr 20Cross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allows remote attackers to inject arbitrary web script or HTML via a crafted…
CVE-2016-5760
GR
Groupwise
Novell
6.1
1%
Apr 20Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject…
CVE-2016-9169
GR
Groupwise
Novell
6.1
1%
Mar 23A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote…
CVE-2016-9168
ED
Edirectory
Novell
6.5
1%
Mar 23A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking
CVE-2016-9167
ED
Edirectory
Novell
7.5
1%
Mar 23NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which could lead to a privilege escalation by modifying user…
CVE-2016-5747
ED
Edirectory
Novell
7.5
2%
Mar 23A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 allows remote attackers to bypass intended access…
CVE-2016-1603
NI
Netiq Idm Servicenow Driver
Novell
6.5
1%
Mar 23An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users
CVE-2014-9853
LE
Leap
Novell
5.5
2%
Mar 17Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file
CVE-2010-4314
IP
Iprint
Novell
8.8
3%
Mar 11Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter
CVE-2015-7976
SO
Suse Openstack Cloud
Novell
4.3
4%
Jan 30The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause…
CVE-2017-5182
OE
Open Enterprise Server
Novell
7.5
3%
Jan 23Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary file, via a specially crafted URL, that allows complete directory…
CVE-2016-5763
OE
Open Enterprise Server 11
Novell
9.1
2%
Nov 15Vulnerability in Novell Open Enterprise Server (OES2015 SP1 before Scheduled Maintenance Update 10992, OES2015 before Scheduled Maintenance Update 10990, OES11 SP3 before…
CVE-2016-1598
IM
Identity Manager
Novell
5.4
1%
Oct 27XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML…
CVE-2016-7796
SL
Suse Linux Enterprise Software Development Kit
Novell
5.5
1%
Oct 13The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which…
CVE-2016-7052
SL
Suse Linux Enterprise Module For Web Scripting
Novell
7.5
29%
Sep 26crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation
CVE-2016-6306
SL
Suse Linux Enterprise Module For Web Scripting
Novell
5.9
42%
Sep 26The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate…
CVE-2016-6304
SL
Suse Linux Enterprise Module For Web Scripting
Novell
7.5
63%
Sep 26Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption)…
CVE-2016-4303
SP
Suse Package Hub For Suse Linux Enterprise
Novell
9.8
7%
Sep 26The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code…
CVE-2015-8924
SL
Suse Linux Enterprise Software Development Kit
Novell
5.5
5%
Sep 20The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service…
CVE-2015-8923
SL
Suse Linux Enterprise Software Development Kit
Novell
6.5
3%
Sep 20The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via…
CVE-2015-8922
SL
Suse Linux Enterprise Software Development Kit
Novell
5.5
2%
Sep 20The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and…
CVE-2015-8921
SL
Suse Linux Enterprise Software Development Kit
Novell
7.5
12%
Sep 20The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file
CVE-2015-8920
SL
Suse Linux Enterprise Software Development Kit
Novell
5.5
2%
Sep 20The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a…
CVE-2015-8919
SL
Suse Linux Enterprise Software Development Kit
Novell
7.5
5%
Sep 20The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds…