cockpit-packagekit vulnerabilities (Red Hat)
7 vulnerabilities.
-
cockpit-packagekitRed Hat Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui 8.0 High -
cockpit-packagekitRed Hat Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection 9.8 Critical -
cockpit-packagekitRed Hat lodash vulnerable to Code Injection via `_.template` imports key names 8.1 High -
cockpit-packagekitRed Hat lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` 6.5 Medium -
cockpit-packagekitRed Hat Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option 3.2 Low -
cockpit-packagekitRed Hat Cockpit: command injection when deleting a sosreport with a crafted name 7.3 High -
cockpit-packagekitRed Hat A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.... 9.1 Critical