Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Suse Subscribe
Filtered by product Kiwi
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-4195 1 Suse 3 Kiwi, Studio Extension For System Z, Studio Onsite 2014-04-17 7.5 HIGH N/A
kiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in an image name.
CVE-2011-4192 1 Suse 3 Kiwi, Studio Extension For System Z, Studio Onsite 2014-04-17 7.5 HIGH N/A
kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by "double quotes in kiwi_oemtitle of .profile."
CVE-2011-3180 1 Suse 3 Kiwi, Studio Extension For System Z, Studio Onsite 2014-04-17 7.5 HIGH N/A
kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in the path of an overlay file, related to chown.