Approved changes feed: RSS · Atom
cpe:2.3:a:novell:filr:*:security_update_1:*:*:*:*:*:*
part: a version: * update: security_update_1
| Vendor | Novell (4a1c187d-e568-531f-92b0-685a3df2807c) |
|---|---|
| Product | Filr (be868ccd-fc6d-5c1b-85c6-14d06f95ee88) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-1611 |
vulnerable | 2026-06-08 05:07:31.868133 |
Details available
Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by replacing this file's content with arbitrary shell commands.
Published: 2016-08-01T01:00:00.000Z
Updated: 2024-08-05T23:02:12.166Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1610 |
vulnerable | 2026-06-08 05:07:31.867816 |
Details available
Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote attackers to bypass intended access restrictions and write to arbitrary files via a .. (dot dot) in a blob name.
Published: 2016-08-01T01:00:00.000Z
Updated: 2024-08-05T23:02:12.359Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1609 |
vulnerable | 2026-06-08 05:07:31.867456 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input, as demonstrated by a crafted attribute of an IMG element in the phone field of a user profile.
Published: 2016-08-01T01:00:00.000Z
Updated: 2024-08-05T23:02:12.411Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1608 |
vulnerable | 2026-06-08 05:07:31.867066 |
Details available
vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ntpServer parameter.
Published: 2016-08-01T01:00:00.000Z
Updated: 2024-08-05T23:02:12.307Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1607 |
vulnerable | 2026-06-08 05:07:31.866589 |
Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow remote attackers to hijack the authentication of administrators, as demonstrated by reconfiguring time settings via a vaconfig/time request.
Published: 2016-08-01T01:00:00.000Z
Updated: 2024-08-05T23:02:12.143Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.