Show filters
28 Total Results
Displaying 11-20 of 28
Sort by:
Attacker Value
Unknown
CVE-2023-4196
Disclosure Date: August 06, 2023 (last updated October 08, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3.
0
Attacker Value
Unknown
CVE-2023-4195
Disclosure Date: August 06, 2023 (last updated October 08, 2023)
PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3.
0
Attacker Value
Unknown
CVE-2023-37650
Disclosure Date: July 20, 2023 (last updated October 08, 2023)
A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands.
0
Attacker Value
Unknown
CVE-2023-37649
Disclosure Date: July 20, 2023 (last updated October 08, 2023)
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.
0
Attacker Value
Unknown
CVE-2023-1313
Disclosure Date: March 10, 2023 (last updated October 08, 2023)
Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.
0
Attacker Value
Unknown
CVE-2023-1160
Disclosure Date: March 03, 2023 (last updated October 08, 2023)
Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.
0
Attacker Value
Unknown
CVE-2021-32857
Disclosure Date: February 21, 2023 (last updated October 08, 2023)
Cockpit is a content management system that allows addition of content management functionality to any site. In versions 0.12.2 and prior, bad HTML sanitization in `htmleditor.js` may lead to cross-site scripting (XSS) issues. There are no known patches for this issue.
0
Attacker Value
Unknown
CVE-2023-0780
Disclosure Date: February 11, 2023 (last updated October 08, 2023)
Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.
0
Attacker Value
Unknown
CVE-2023-0759
Disclosure Date: February 09, 2023 (last updated October 08, 2023)
Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.
0
Attacker Value
Unknown
CVE-2022-2818
Disclosure Date: August 15, 2022 (last updated November 29, 2024)
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.
0
