novell zenworks configuration management 10.2 vulnerabilities and exploits

(subscribe to this query)

1000

VMScore

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 prior to 10.3 allows remote malicious users to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction wit...

Novell Zenworks Configuration Management 10.0 Novell Zenworks Configuration Management 10.1 Novell Zenworks Configuration Management 10.2

1 EDB exploit

1000

VMScore

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 prior to 10.3 allows remote malicious users to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the ...

Novell Zenworks Configuration Management 10.0 Novell Zenworks Configuration Management 10.2 Novell Zenworks Configuration Management 10.1

1 EDB exploit

605

VMScore

Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote malicious users to execute arbitrary code via a long bstrReplaceT...

Novell Zenworks Configuration Management 11 Novell Zenworks Configuration Management 10.2 Novell Zenworks Configuration Management 10.3

685

VMScore

Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote malicious users to execute arbitrary commands v...

Novell Zenworks Configuration Management 10.2 Novell Zenworks Configuration Management 10.3 Novell Zenworks Configuration Management 11

1 EDB exploit

605

VMScore

The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 provides access to the mscomct2.ocx file, which allows remote malicious users to execute arbitrary code by leveraging unspecified mscomct2 flaws.

Novell Zenworks Configuration Management 10.3 Novell Zenworks Configuration Management 10.2 Novell Zenworks Configuration Management 11

383

VMScore

The ZCC page in Novell ZENworks Configuration Management (ZCM) prior to 11.2.4 allows malicious users to conduct cross-frame scripting attacks via unknown vectors.

Novell Zenworks Configuration Management 10.3.1 Novell Zenworks Configuration Management 10.3 Novell Zenworks Configuration Management 10.2 Novell Zenworks Configuration Management Novell Zenworks Configuration Management 11.2 Novell Zenworks Configuration Management 11 Novell Zenworks Configuration Management 10.3.3 Novell Zenworks Configuration Management 10.3.2

890

VMScore

Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) prior to 11.2.4 has unknown impact and attack vectors related to an "Application Exception."

Novell Zenworks Configuration Management Novell Zenworks Configuration Management 11.2 Novell Zenworks Configuration Management 11 Novell Zenworks Configuration Management 10.2 Novell Zenworks Configuration Management 10.3.2 Novell Zenworks Configuration Management 10.3 Novell Zenworks Configuration Management 10.3.3 Novell Zenworks Configuration Management 10.3.1

605

VMScore

Cross-site request forgery (CSRF) vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) prior to 11.2.4 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.

Novell Zenworks Configuration Management 11.2 Novell Zenworks Configuration Management 11 Novell Zenworks Configuration Management 10.3.3 Novell Zenworks Configuration Management 10.3.1 Novell Zenworks Configuration Management 10.2 Novell Zenworks Configuration Management Novell Zenworks Configuration Management 10.3.2 Novell Zenworks Configuration Management 10.3

605

VMScore

Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) prior to 11.2.4 allows remote malicious users to hijack web sessions via unspecified vectors.

Novell Zenworks Configuration Management 11 Novell Zenworks Configuration Management 10.3.3 Novell Zenworks Configuration Management 10.3.2 Novell Zenworks Configuration Management 10.3.1 Novell Zenworks Configuration Management Novell Zenworks Configuration Management 10.3 Novell Zenworks Configuration Management 11.2 Novell Zenworks Configuration Management 10.2

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook