cockpit security update

310.4-1.0.1 - Update documentation links Orabug: 34706402 - Drop subscription-manager-cockpit requirement for ol Orabug: 34681110 - Remove duplicate reference to server in cockpit Orabug: 33862832 - Update documentation links Orabug: 32795691 - Make documentation links point to Oracle Linux...

AlmaLinux 8 : cockpit (ALSA-2024:3667)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:3667 advisory. cockpit: command injection when deleting a sosreport with a crafted name CVE-2024-2947 Tenable has extracted the preceding description block directly from the...

Moderate: cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fixes: cockpit: command injection when deleting a sosreport with a crafted...

RHEL 8 : cockpit (RHSA-2024:3667)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3667 advisory. Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELin...

ALSA-2024:3667 Moderate: cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fixes: cockpit: command injection when deleting a sosreport with a crafted...

Fedora 40 : cockpit (2024-4e95f130fc)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4e95f130fc advisory. Automatic update for cockpit-314-1.fc40. Changelog for cockpit Thu Mar 28 2024 Packit - 314-1 - Diagnostic reports: Fix command injection...

Debian dsa-5655 : cockpit - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5655 advisory. - A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege...

Fedora 38 : cockpit (2024-31e83b461d)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-31e83b461d advisory. sosreport: Fix command injection with crafted report names CVE-2024-2947 Tenable has extracted the preceding description block directly from the Fedora...

CVE-2024-2947

creationtimestamp| type| source ---|---|--- 2024-04-09 20:12:43+00:00| seen| https://t.me/arpsyndicate/4412 2025-06-26 13:50:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19594...

Fedora 39 : cockpit (2024-6065341780)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6065341780 advisory. Automatic update for cockpit-314-1.fc39. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2024-2947

A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer...

CVE-2024-2947

A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer...

CVE-2024-2947

A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer...

CVE-2019-2947

creationtimestamp| type| source ---|---|--- 2024-01-09 14:46:32+00:00| seen| https://t.me/ctinow/165021...

CVE-2023-2947

creationtimestamp| type| source ---|---|--- 2023-05-28 02:29:42+00:00| seen| https://t.me/cibsecurity/64743 2025-01-14 19:11:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1587...

CVE-2023-2947

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2947 Cross-site Scripting (XSS) - Stored in openemr/openemr

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2947 Cross-site Scripting (XSS) - Stored in openemr/openemr

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2947

CVE-2023-2947 is a stored XSS vulnerability in OpenEMR prior to 7.0.1, triggered via the admin panel’s Site Name/Branding field (admin.php). The root cause is inadequate sanitization of the text, enabling an attacker with admin access to inject HTML. Public sources corroborate OpenEMR

flacit.com Cross Site Scripting vulnerability OBB-3242276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...