Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted archive file list that is used in an overlay file.
Max CVSS
4.3
EPSS Score
0.42%
Published
2011-08-23
Updated
2017-08-29
Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename.
Max CVSS
7.5
EPSS Score
5.70%
Published
2011-08-23
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted pattern name that is included in an RPM info display.
Max CVSS
4.3
EPSS Score
0.42%
Published
2011-08-23
Updated
2017-08-29
Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.
Max CVSS
7.5
EPSS Score
0.47%
Published
2011-08-23
Updated
2017-08-29
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file.
Max CVSS
7.5
EPSS Score
7.53%
Published
2011-08-23
Updated
2017-08-29
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list of testdrive modified files.
Max CVSS
7.5
EPSS Score
7.53%
Published
2011-08-23
Updated
2017-08-29
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of testdrive modified files.
Max CVSS
7.5
EPSS Score
6.44%
Published
2011-08-23
Updated
2017-08-29
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM.
Max CVSS
7.5
EPSS Score
6.44%
Published
2011-08-23
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info display.
Max CVSS
4.3
EPSS Score
0.42%
Published
2011-08-23
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a pattern listing.
Max CVSS
4.3
EPSS Score
0.17%
Published
2011-08-23
Updated
2017-08-29
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh.
Max CVSS
9.3
EPSS Score
0.43%
Published
2011-08-23
Updated
2017-08-29
11 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!