Agentejo

Cockpit

30 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2023-4196

Exploit
  • EPSS 0.08%
  • Published 06.08.2023 18:15:10
  • Last modified 21.11.2024 08:34:36

Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3.

8.8

CVE-2023-4195

Exploit
  • EPSS 1.64%
  • Published 06.08.2023 18:15:10
  • Last modified 21.11.2024 08:34:35

PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3.

8.8

CVE-2023-37650

Exploit
  • EPSS 1.11%
  • Published 20.07.2023 20:15:10
  • Last modified 21.11.2024 08:12:04

A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands.

7.5

CVE-2023-37649

Exploit
  • EPSS 0.53%
  • Published 20.07.2023 20:15:10
  • Last modified 21.11.2024 08:12:04

Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.

8.8

CVE-2023-1313

Exploit
  • EPSS 0.09%
  • Published 10.03.2023 12:15:21
  • Last modified 21.11.2024 07:38:54

Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.

5.5

CVE-2023-1160

Exploit
  • EPSS 0.12%
  • Published 03.03.2023 02:15:53
  • Last modified 21.11.2024 07:38:34

Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.

6.1

CVE-2021-32857

Exploit
  • EPSS 0.48%
  • Published 21.02.2023 15:15:11
  • Last modified 21.11.2024 06:07:53

Cockpit is a content management system that allows addition of content management functionality to any site. In versions 0.12.2 and prior, bad HTML sanitization in `htmleditor.js` may lead to cross-site scripting (XSS) issues. There are no known patc...

5.4

CVE-2023-0780

Exploit
  • EPSS 0.17%
  • Published 11.02.2023 02:20:44
  • Last modified 21.11.2024 07:37:48

Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.

8.8

CVE-2023-0759

Exploit
  • EPSS 0.04%
  • Published 09.02.2023 14:15:24
  • Last modified 21.11.2024 07:37:45

Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.

8.8

CVE-2022-2818

Exploit
  • EPSS 1.42%
  • Published 15.08.2022 11:21:31
  • Last modified 21.11.2024 07:01:44

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.