Novell Suse Studio Onsite — known CVE vulnerabilities

Every CVE whose affected-product data names Novell Suse Studio Onsite, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2011-2225 — CVSS 9.3 (critical): Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a…
• CVE-2011-2648 — CVSS 7.5 (high): Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code…
• CVE-2011-2645 — CVSS 7.5 (high): Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code…
• CVE-2011-2646 — CVSS 7.5 (high): Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code…
• CVE-2011-2647 — CVSS 7.5 (high): Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code…
• CVE-2011-2649 — CVSS 7.5 (high): Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an…
• CVE-2011-2651 — CVSS 7.5 (high): Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to…
• CVE-2011-2644 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject…
• CVE-2011-2652 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject…
• CVE-2011-2650 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject…
• CVE-2013-4589 — CVSS 4.3 (medium): The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a denial of service…
• CVE-2011-2226 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject…