Show filters
62 Total Results
Displaying 21-30 of 62
Sort by:
Attacker Value
Unknown
CVE-2023-37649
Disclosure Date: July 20, 2023 (last updated October 08, 2023)
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.
0
Attacker Value
Unknown
CVE-2023-3520
Disclosure Date: July 06, 2023 (last updated October 08, 2023)
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository it-novum/openitcockpit prior to 4.6.6.
0
Attacker Value
Unknown
CVE-2023-36663
Disclosure Date: June 25, 2023 (last updated October 08, 2023)
it-novum openITCOCKPIT (aka open IT COCKPIT) 4.6.4 before 4.6.5 allows SQL Injection (by authenticated users) via the sort parameter of the API interface.
0
Attacker Value
Unknown
CVE-2023-3218
Disclosure Date: June 13, 2023 (last updated October 08, 2023)
Race Condition within a Thread in GitHub repository it-novum/openitcockpit prior to 4.6.5.
0
Attacker Value
Unknown
CVE-2023-1313
Disclosure Date: March 10, 2023 (last updated October 08, 2023)
Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.
0
Attacker Value
Unknown
CVE-2023-1160
Disclosure Date: March 03, 2023 (last updated October 08, 2023)
Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.
0
Attacker Value
Unknown
CVE-2021-32857
Disclosure Date: February 21, 2023 (last updated October 08, 2023)
Cockpit is a content management system that allows addition of content management functionality to any site. In versions 0.12.2 and prior, bad HTML sanitization in `htmleditor.js` may lead to cross-site scripting (XSS) issues. There are no known patches for this issue.
0
Attacker Value
Unknown
CVE-2023-0780
Disclosure Date: February 11, 2023 (last updated October 08, 2023)
Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.
0
Attacker Value
Unknown
CVE-2023-0759
Disclosure Date: February 09, 2023 (last updated October 08, 2023)
Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.
0
Attacker Value
Unknown
CVE-2022-2818
Disclosure Date: August 15, 2022 (last updated November 29, 2024)
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.
0
