cockpit vulnerabilities (Ubuntu)
13 vulnerabilities.
-
cockpitUbuntu [Unknown description] No score -
cockpitUbuntu Cockpit: cockpit: unauthorized modification of login records via integer overflow 3.6 Low -
cockpitUbuntu Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash 5.9 Medium -
cockpitUbuntu Cockpit: cockpit: denial of service via unbounded connection thread spawning 7.5 High -
cockpitUbuntu Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to... 6.1 Medium -
cockpitUbuntu Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html 7.5 High -
cockpitUbuntu Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui 8.0 High -
cockpitUbuntu Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection 9.8 Critical -
cockpitUbuntu Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw() 7.7 High -
cockpitUbuntu Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option 3.2 Low -
cockpitUbuntu A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate... 7.5 High -
cockpitUbuntu Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to... 4.3 Medium -
cockpitUbuntu It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly... 7.5 High