104 matches found
Code injection
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of testdrive modified files...
Design/Logic Flaw
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh...
Design/Logic Flaw
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file...
Cross site scripting
Cross-site scripting XSS vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted pattern name that is included in an RPM info display...
Cross site scripting
Cross-site scripting XSS vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a pattern listing...
Code injection
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM...
Design/Logic Flaw
Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call...
CVE-2011-2644
Cross-site scripting XSS vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info display...
CVE-2011-2225
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh...
CVE-2011-2648
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file...
CVE-2011-2651
The CVE-2011-2651 entry concerns the Kiwi file browser prior to 3.74.2 (used in SUSE Studio 1.1 prior to 1.1.4). A vulnerability in the file browser allows remote attackers to execute arbitrary code via a crafted filename. The connected sources confirm the affected software and the nature of impa...
CVE-2011-2650
Cross-site scripting XSS vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted pattern name that is included in an RPM info display...
CVE-2011-2225
CVE-2011-2225 affects Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4. The vulnerability allows an attacker to achieve an unknown impact through a crafted directory pathname inserted into config.sh. The available documents do not specify the exact root cause, affected files beyond Kiw...
CVE-2011-2226
The CVE-2011-2226 entry describes a Cross-site scripting (XSS) vulnerability in Kiwi before version 3.74.2, applicable to SUSE Studio 1.1 before 1.1.4. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, in a scenario related to a pattern list...
CVE-2011-2646
Kiwi prior to 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, is affected by CVE-2011-2646. The flaw allows remote attackers to execute arbitrary code by supplying a crafted filename within the list of testdrive modified files. The SUSE advisory confirms the vulnerable component (Kiwi) and affec...
CVE-2011-2650
The connected SUSE advisory confirms an XSS vulnerability in Kiwi prior to 3.74.2, as used in SUSE Studio 1.1 prior to 1.1.4, allowing remote attackers to inject arbitrary web script or HTML via a crafted pattern name shown in an RPM info display. No exploit details are provided in the documents,...
CVE-2011-2652
Cross-site scripting XSS vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted archive file list that is used in an overlay file...
CVE-2011-2226
Cross-site scripting XSS vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a pattern listing...
CVE-2011-2647
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list of testdrive modified files...
CVE-2011-2645
Kiwi before 3.74.2, used in SUSE Studio 1.1 before 1.1.4, contains an unspecified vulnerability that allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM. The issue is documented across multiple sources (SUSE CVE entry and NVD) with no publicly detailed root-c...