Agentejo vulnerabilities

Products

• Cockpit 31
• Cockpit Cms 2

Newest

• agentejo cockpit cms, cockpit cms +1 more agentejo Cockpit CMS htaccess config.yaml YAMLLoad file access CVE-2026-13533 6.9 MediumJune 29, 2026
• agentejo cockpit Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw() CVE-2026-31891 Public exploitFix available 7.7 HighMarch 17, 2026
• agentejo cockpit Cockpit save cross site scripting CVE-2025-7053 Fix available 5.1 MediumJuly 4, 2025
• agentejo cockpit, cockpit cms, cockpit cms +2 more Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo CVE-2024-4825 Fix available 9.8 CriticalMay 13, 2024
• agentejo cockpit, cockpit cms +1 more Cross-Site Scripting vulnerability in Cockpit CMS CVE-2024-2001 5.5 MediumFebruary 29, 2024
• agentejo cockpit Cockpit CMS arbitrary file upload vulnerability CVE-2023-41564 Public exploit 6.1 MediumSeptember 8, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit CVE-2023-4451 6.1 MediumAugust 20, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit CVE-2023-4433 8.3 HighAugust 19, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit CVE-2023-4432 8.3 HighAugust 19, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit CVE-2023-4422 Fix available 6.8 MediumAugust 18, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit CVE-2023-4395 8.1 HighAugust 17, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit CVE-2023-4321 8.3 HighAugust 14, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit CVE-2023-4196 Fix available 8.3 HighAugust 6, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more PHP Remote File Inclusion in cockpit-hq/cockpit CVE-2023-4195 Fix available 9.9 CriticalAugust 6, 2023
• agentejo cockpit Cockpit CMS Cross-Site Request Forgery vulnerability CVE-2023-37650 Fix available 8.8 HighJuly 20, 2023
• agentejo cockpit Cockpit CMS vulnerable to incorrect access control CVE-2023-37649 Fix available 7.5 HighJuly 20, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Unrestricted Upload of File with Dangerous Type in cockpit-hq/cockpit CVE-2023-1313 Fix available 7.2 HighMarch 10, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Use of Platform-Dependent Third Party Components in cockpit-hq/cockpit CVE-2023-1160 4.0 MediumMarch 3, 2023
• agentejo cockpit, microweber +1 more Cockpit vulnerable to Cross-site Scripting CVE-2021-32857 6.1 MediumFebruary 20, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit CVE-2023-0780 Fix available 4.0 MediumFebruary 11, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Privilege Chaining in cockpit-hq/cockpit CVE-2023-0759 Fix available 5.3 MediumFebruary 9, 2023
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit CVE-2022-2818 Fix available 9.8 CriticalAugust 15, 2022
• agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 more Insufficient Session Expiration in cockpit-hq/cockpit CVE-2022-2713 Fix available 8.6 HighAugust 8, 2022
• agentejo cockpit Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command... CVE-2020-35131 EPSS 50.3% 9.8 CriticalJanuary 8, 2021
• agentejo cockpit Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function. CVE-2020-35846 Public exploit EPSS 93.3% 9.8 CriticalDecember 30, 2020
• agentejo cockpit Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword... CVE-2020-35848 Public exploit EPSS 74.6% 9.8 CriticalDecember 30, 2020
• agentejo cockpit Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword... CVE-2020-35847 Public exploit EPSS 98.2% 9.8 CriticalDecember 30, 2020
• agentejo cockpit An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter... CVE-2020-14408 6.1 MediumJune 17, 2020
• agentejo cockpit Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an... CVE-2018-15540 9.8 CriticalOctober 15, 2018
• agentejo cockpit Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API... CVE-2018-15539 8.8 HighOctober 15, 2018
• agentejo cockpit Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities. CVE-2018-15538 6.1 MediumOctober 15, 2018
• agentejo cockpit SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary... CVE-2017-14611 9.1 CriticalApril 10, 2018