Kiwi vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

KI

Product

Kiwi

by Marcus Schafer · last CVE Aug 23, 2011

11

CVEs

0

On KEV

–

Max CVSS

0

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 0High 0Medium 0Low 0

Severity

All severities11 Critical0 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Kiwi to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2011-2652	–	1%	Aug 23	Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a… Affected: through 3.74.1
CVE-2011-2651	–	3%	Aug 23	Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted… Affected: through 3.74.1
CVE-2011-2650	–	1%	Aug 23	Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a… Affected: through 3.74.1
CVE-2011-2649	–	2%	Aug 23	Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call Affected: through 3.74.1
CVE-2011-2648	–	3%	Aug 23	Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file Affected: through 3.74.1
CVE-2011-2647	–	3%	Aug 23	Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list… Affected: through 3.74.1
CVE-2011-2646	–	3%	Aug 23	Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of… Affected: through 3.74.1
CVE-2011-2645	–	3%	Aug 23	Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM Affected: through 3.74.1
CVE-2011-2644	–	1%	Aug 23	Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via… Affected: through 3.74.1
CVE-2011-2226	–	1%	Aug 23	Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via… Affected: through 3.74.1
CVE-2011-2225	–	1%	Aug 23	Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is… Affected: through 3.74.1