Marcus Schafer

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Marcus Schafer records in CISA KEV

No Marcus Schafer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kiwi 11 records MEDIUM

Records

11 records in Kiwi · all components

TI-2011-01947 CVE-2011-2225 · GHSA-hr33-mrq4-qq9h

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4…

MEDIUM 43

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01373 Published 2011-08-23 No fix listed

TI-2011-02313 CVE-2011-2651 · GHSA-vhm3-8794-xp2q

Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE…

LOW 38

Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02657 Published 2011-08-23 No fix listed

TI-2011-02310 CVE-2011-2648 · GHSA-f7ww-4j58-r8c4

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4…

LOW 38

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02657 Published 2011-08-23 No fix listed

TI-2011-02309 CVE-2011-2647 · GHSA-4mr2-vrjg-c7xm

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4…

LOW 38

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list of testdrive modified files.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02657 Published 2011-08-23 No fix listed

TI-2011-02308 CVE-2011-2646 · GHSA-g87j-53qv-pqjc

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4…

LOW 38

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of testdrive modified files.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02657 Published 2011-08-23 No fix listed

TI-2011-02307 CVE-2011-2645 · GHSA-mhpc-vhpw-2g5c

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4…

LOW 38

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02657 Published 2011-08-23 No fix listed

TI-2011-02311 CVE-2011-2649 · GHSA-mw98-cjvm-vp82

Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute…

LOW 36

Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01688 Published 2011-08-23 No fix listed CWE-20

TI-2011-02314 CVE-2011-2652 · GHSA-rf5x-mjpc-j2v3

Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio…

LOW 22

Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted archive file list that is used in an o…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01212 Published 2011-08-23 No fix listed CWE-79

TI-2011-02312 CVE-2011-2650 · GHSA-36fg-2x3m-m49m

Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio…

LOW 22

Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted pattern name that is included in an RP…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01212 Published 2011-08-23 No fix listed CWE-79

TI-2011-02306 CVE-2011-2644 · GHSA-pr67-38j4-x79q

Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio…

LOW 22

Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info disp…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01212 Published 2011-08-23 No fix listed CWE-79

TI-2011-01948 CVE-2011-2226 · GHSA-hj8q-w89q-qrx9

Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio…

LOW 22

Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a pattern listin…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01176 Published 2011-08-23 No fix listed CWE-79

Open these records in search →