Novell vulnerabilities4 known to be exploited.
Novell has 675 published vulnerabilities across 118 products in our catalogue. 4 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Suse Linux Enterprise Server, with 94. If you run Novell software, patch the exploited flaws first.
The most recent Novell flaw added to the known-exploited list is CVE-2026-31431, on 1 May 2026. We keep watching the known-exploited list.
Which Novell products have the most vulnerabilities?
Suse Linux Enterprise Server leads with 94 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Novell vulnerabilities are being exploited?
4 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.8Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.
- 9.8Adobe Flash Player Memory Corruption Vulnerability
A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.
- 9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.
- 9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.
Which Novell flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by...
- >99%
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle...
- >99%
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown...
- 93%CVE-2017-14492Critical
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
- 88%CVE-2015-0240Critical
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer,...
- 85%CVE-2006-5478High
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP...
- 84%CVE-2017-14495High
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response...
- 77%CVE-2013-1080Critical
The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows remote attackers to conduct directory...
- 74%CVE-2015-0779Critical
Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid...
- 74%
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory...
All Novell products we track.
100 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Suse Linux Enterprise Serversuse_linux_enterprise_server94 vulnerabilities8 versions
- Suse Linux Enterprise Desktopsuse_linux_enterprise_desktop83 vulnerabilities6 versions
- Netwarenetware76 vulnerabilities10 versions
- Groupwisegroupwise75 vulnerabilities36 versions
- Suse Linux Enterprise Software Development Kitsuse_linux_enterprise_software_development_kit65 vulnerabilities4 versions
- Edirectoryedirectory52 vulnerabilities22 versions
- Zenworks Configuration Managementzenworks_configuration_management35 vulnerabilities20 versions
- Suse Linux Enterprise Real Time Extensionsuse_linux_enterprise_real_time_extension33 vulnerabilities4 versions
- Iprintiprint30 vulnerabilities29 versions
- Suse Linux Enterprise Debuginfosuse_linux_enterprise_debuginfo24 vulnerabilities2 versions
- Suse Linux Enterprise Workstation Extensionsuse_linux_enterprise_workstation_extension24 vulnerabilities1 version
- Suse Linuxsuse_linux23 vulnerabilities8 versions
- Open Enterprise Serveropen_enterprise_server22 vulnerabilities11 versions
- Suse Linux Enterprise Live Patchingsuse_linux_enterprise_live_patching22 vulnerabilities1 version
- Suse Linux Enterprise Module for Public Cloudsuse_linux_enterprise_module_for_public_cloud22 vulnerabilities2 versions
- Netmailnetmail17 vulnerabilities27 versions
- Netware FTP Servernetware_ftp_server17 vulnerabilities20 versions
- Suse Package Hub for Suse Linux Enterprisesuse_package_hub_for_suse_linux_enterprise17 vulnerabilities1 version
- Clientclient16 vulnerabilities8 versions
- Imanagerimanager16 vulnerabilities12 versions
- Ichainichain15 vulnerabilities4 versions
- Bordermanagerbordermanager13 vulnerabilities4 versions
- Linux Desktoplinux_desktop12 vulnerabilities1 version
- Suse Studio Onsitesuse_studio_onsite12 vulnerabilities2 versions
This directory lists the 100 Novell products with at least one tracked version, of 118 in our catalogue.
Running Novell? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.
- Matched to
- Novell on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 675 published vulnerabilities across 118 products and 476 versions from Novell. The most recent Novell flaw added to the known-exploited list is CVE-2026-31431, on 1 May 2026.
4 Novell vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2026-31431, CVE-2015-3043 and CVE-2014-6271. The full list is on this page.
Suse Linux Enterprise Server, with 94 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Novell products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.