cockpit vulnerabilities (SUSE)
9 vulnerabilities.
-
cockpitSUSE Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui 8.0 High -
cockpitSUSE Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection 9.8 Critical -
cockpitSUSE nghttp2 Denial of service: Assertion failure due to the missing state validation 7.5 High -
cockpitSUSE minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions 7.5 High -
cockpitSUSE Rollup 4 has Arbitrary File Write via Path Traversal 8.8 High -
cockpitSUSE minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern 8.7 High -
cockpitSUSE Uncontrolled Resource Consumption in @isaacs/brace-expansion 9.2 Critical -
cockpitSUSE Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions 6.9 Medium -
cockpitSUSE Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option 3.2 Low