[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fj4xTBZlvTcerYcIyiZmyf2z7WEnYZK84PD8HSEzngvw":3,"g5a-ex:marcus_schafer\u002Fkiwi@*":81,"g5a-family:marcus_schafer\u002Fkiwi":83},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":58,"seoMetadata":59,"meta":78},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"marcus_schafer","kiwi",0,11,"2011-08-23",[],"Kiwi by Marcus Schafer is a technology product and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,24,27,30,33,36,40,46,52,55],{"cveId":17,"description":18,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2011-2648","Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file.",7.5,"v2","High",false,0.02657,{"cveId":25,"description":26,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2011-2651","Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename.",{"cveId":28,"description":29,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2011-2645","Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM.",{"cveId":31,"description":32,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2011-2646","Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of testdrive modified files.",{"cveId":34,"description":35,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2011-2647","Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list of testdrive modified files.",{"cveId":37,"description":38,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":39},"CVE-2011-2649","Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.",0.01688,{"cveId":41,"description":42,"publishedDate":11,"cvssScore":43,"cvssVersion":20,"severity":44,"isKev":22,"epssScore":45},"CVE-2011-2225","Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh.",9.3,"Critical",0.01373,{"cveId":47,"description":48,"publishedDate":11,"cvssScore":49,"cvssVersion":20,"severity":50,"isKev":22,"epssScore":51},"CVE-2011-2644","Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info display.",4.3,"Medium",0.01212,{"cveId":53,"description":54,"publishedDate":11,"cvssScore":49,"cvssVersion":20,"severity":50,"isKev":22,"epssScore":51},"CVE-2011-2650","Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted pattern name that is included in an RPM info display.",{"cveId":56,"description":57,"publishedDate":11,"cvssScore":49,"cvssVersion":20,"severity":50,"isKev":22,"epssScore":51},"CVE-2011-2652","Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted archive file list that is used in an overlay file.",[],{"title":60,"metaDescription":61,"keywords":62,"structuredData":63},"Kiwi by Marcus Schafer - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Kiwi by Marcus Schafer with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Kiwi vulnerabilities, Kiwi security, Kiwi CVE, Marcus Schafer Kiwi, Kiwi threat intelligence, Marcus Schafer security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":64,"@type":65,"name":66,"description":61,"url":67,"manufacturer":68,"applicationCategory":72,"softwareVersion":73,"mainEntity":74},"https:\u002F\u002Fschema.org","SoftwareApplication","Kiwi","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmarcus_schafer\u002Fkiwi",{"@type":69,"name":70,"url":71},"Organization","Marcus Schafer","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmarcus_schafer","Security Software","Multiple versions",{"@type":75,"name":76,"description":77,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Kiwi Security Vulnerabilities","Security vulnerabilities affecting Kiwi by Marcus Schafer",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":79,"apiVersion":80},"2026-10-18T23:48:13.507Z","3.0",{"rows":82,"total":9,"capped":22,"failed":9},[],[]]