Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
agentejo vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-0780
Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit before 2.3.9-dev.
Agentejo Cockpit
4.3
CVSSv2
CVE-2018-15538
Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities.
Agentejo Cockpit -
7.5
CVSSv2
CVE-2018-15540
Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an malicious user to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal.
Agentejo Cockpit -
7.5
CVSSv2
CVE-2020-35846
Agentejo Cockpit prior to 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.
Agentejo Cockpit
4 Github repositories
4.3
CVSSv2
CVE-2020-14408
An issue exists in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login route allows for injection of arbitrary JavaScript code into a web page's content, creating a Reflected XSS attack vector.
Agentejo Cockpit 0.10.2
NA
CVE-2023-41564
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows malicious users to execute arbitrary code via uploading a crafted .shtml file.
Agentejo Cockpit 2.6.3
6.4
CVSSv2
CVE-2017-14611
SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote malicious users to read arbitrary files or send TCP traffic to intranet hosts via the url parameter, related to use of the discontinued aheinze/fetch_url_contents component.
Agentejo Cockpit 0.13.0
NA
CVE-2024-4825
A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.
4
CVSSv2
CVE-2020-35850
An SSRF issue exists in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product. NOTE: the vendor states "I don't think [it] is a big real-life issue.
Cockpit-project Cockpit 234
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49333
CVE-2024-33901
CVE-2024-36001
CVE-2024-2835
firewall
XPath injection
authentication bypass
CVE-2024-22120
CVE-2024-32002
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3