It-novum vulnerabilities

Products

• Openitcockpit 17
• It-novum/openitcockpit 2

Newest

• it-novum openitcockpit openITCOCKPIT has Authenticated Command Injection Leading to Remote Code Execution via Host Address Macro Expansion CVE-2026-24893 8.8 HighApril 14, 2026
• it-novum openitcockpit openITCOCKPIT has Unsafe Deserialization in openITCOCKPIT Changelog Handling CVE-2026-24892 7.5 HighFebruary 20, 2026
• it-novum openitcockpit openITCOCKPIT has Unsafe PHP Deserialization in Gearman Worker Allowing Conditional Object Injection CVE-2026-24891 7.5 HighFebruary 20, 2026
• it-novum it-novum/openitcockpit, openitcockpit +1 more Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in it-novum/openitcockpit CVE-2023-3520 4.3 MediumJuly 6, 2023
• it-novum openitcockpit it-novum openITCOCKPIT (aka open IT COCKPIT) 4.6.4 before 4.6.5 allows SQL Injection (by... CVE-2023-36663 8.8 HighJune 25, 2023
• it-novum it-novum/openitcockpit, openitcockpit +1 more Race Condition within a Thread in it-novum/openitcockpit CVE-2023-3218 6.5 MediumJune 13, 2023
• it-novum openitcockpit openITCOCKPIT before 3.7.3 uses the 1fea123e07f730f76e661bced33a94152378611e API key rather than... CVE-2020-10788 9.1 CriticalMarch 25, 2020
• it-novum openitcockpit openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS... CVE-2020-10789 9.8 CriticalMarch 25, 2020
• it-novum openitcockpit openITCOCKPIT before 3.7.3 has unnecessary files (such as Lodash files) under the web root, which... CVE-2020-10790 5.4 MediumMarch 25, 2020
• it-novum openitcockpit app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3... CVE-2020-10791 6.5 MediumMarch 25, 2020
• it-novum openitcockpit openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self:... CVE-2020-10792 7.5 HighMarch 20, 2020
• it-novum openitcockpit openITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component. CVE-2019-10227 Public exploit 6.1 MediumDecember 31, 2019
• it-novum openitcockpit openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21. CVE-2019-15494 9.8 CriticalAugust 23, 2019
• it-novum openitcockpit openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21. CVE-2019-15493 7.5 HighAugust 23, 2019
• it-novum openitcockpit openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21. CVE-2019-15492 6.1 MediumAugust 23, 2019
• it-novum openitcockpit openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21. CVE-2019-15491 8.8 HighAugust 23, 2019
• it-novum openitcockpit openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21. CVE-2019-15490 9.8 CriticalAugust 23, 2019