CVE-2011-2652

Cross-site scripting XSS vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted archive file list that is used in an overlay file...

CVE-2011-2648

CVE-2011-2648 affects Kiwi prior to 3.74.2 as used in SUSE Studio 1.1 prior to 1.1.4. The vulnerability permits remote code execution via a filter in a modified file. This CVE has a documented CVSSv2 base score of 7.5 (HIGH) with network access, low attack complexity, no authentication, and parti...

CVE-2011-2645

Kiwi before 3.74.2, used in SUSE Studio 1.1 before 1.1.4, contains an unspecified vulnerability that allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM. The issue is documented across multiple sources (SUSE CVE entry and NVD) with no publicly detailed root-c...

CVE-2011-2226

Cross-site scripting XSS vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a pattern listing...