Skip to contentIt-novum Openitcockpit vulnerabilities
- it-novum openitcockpitopenITCOCKPIT has Authenticated Command Injection Leading to Remote Code Execution via Host Address Macro ExpansionCVE-2026-248938.8 High
- it-novum openitcockpitopenITCOCKPIT has Unsafe Deserialization in openITCOCKPIT Changelog HandlingCVE-2026-248927.5 High
- it-novum openitcockpitopenITCOCKPIT has Unsafe PHP Deserialization in Gearman Worker Allowing Conditional Object InjectionCVE-2026-248917.5 High
- it-novum it-novum/openitcockpit, openitcockpit +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in it-novum/openitcockpitCVE-2023-35204.3 Medium
- it-novum openitcockpitit-novum openITCOCKPIT (aka open IT COCKPIT) 4.6.4 before 4.6.5 allows SQL Injection (by...CVE-2023-366638.8 High
- it-novum it-novum/openitcockpit, openitcockpit +1 moreRace Condition within a Thread in it-novum/openitcockpitCVE-2023-32186.5 Medium
- it-novum openitcockpitopenITCOCKPIT before 3.7.3 uses the 1fea123e07f730f76e661bced33a94152378611e API key rather than...CVE-2020-107889.1 Critical
- it-novum openitcockpitopenITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS...CVE-2020-107899.8 Critical
- it-novum openitcockpitopenITCOCKPIT before 3.7.3 has unnecessary files (such as Lodash files) under the web root, which...CVE-2020-107905.4 Medium
- it-novum openitcockpitapp/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3...CVE-2020-107916.5 Medium
- it-novum openitcockpitopenITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self:...CVE-2020-107927.5 High
- it-novum openitcockpitopenITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component.CVE-2019-10227Public exploit6.1 Medium
- it-novum openitcockpitopenITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21.CVE-2019-154949.8 Critical
- it-novum openitcockpitopenITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21.CVE-2019-154937.5 High
- it-novum openitcockpitopenITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21.CVE-2019-154926.1 Medium
- it-novum openitcockpitopenITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21.CVE-2019-154918.8 High
- it-novum openitcockpitopenITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21.CVE-2019-154909.8 Critical