cockpit vulnerabilities (openSUSE)
10 vulnerabilities.
-
cockpitopenSUSE cockpit-370-1.1 on GA media No score -
cockpitopenSUSE Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash 5.9 Medium -
cockpitopenSUSE Cockpit: cockpit: denial of service via unbounded connection thread spawning 7.5 High -
cockpitopenSUSE Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui 8.0 High -
cockpitopenSUSE Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection 9.8 Critical -
cockpitopenSUSE minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions 7.5 High -
cockpitopenSUSE minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern 8.7 High -
cockpitopenSUSE Uncontrolled Resource Consumption in @isaacs/brace-expansion 9.2 Critical -
cockpitopenSUSE Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions 6.9 Medium -
cockpitopenSUSE Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option 3.2 Low