1902 matches found
CVE-2023-41564
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...
CVE-2023-41564
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...
container-tools:rhel8 bug fix and enhancement update
An update is available for libslirp, module.buildah, module.crun, buildah, fuse-overlayfs, udica, module.oci-seccomp-bpf-hook, module.netavark, module.runc, conmon, module.containers-common, python-podman, module.libslirp, module.aardvark-dns, module.fuse-overlayfs, runc, criu, aardvark-dns,...
Cross-site Scripting (XSS)
cockpit-hq/cockpit is vulnerable to Stored Cross-site Scripting XSS. The vulnerability exists in the upload function at bootstrap.php due to lack of MIME sanitization which allows an attacker to inject and execute arbitrary JavaScript...
Cross-site Scripting (XSS)
cockpit-hq/cockpit is vulnerable to Cross-site Scripting XSS. The vulnerability exists in Rest/GraphQL viewer due to lack of escaping script tags which allows an attacker to inject and execute arbitrary javascript...
Cross-site Scripting (XSS)
cockpit-hq/cockpit is vulnerable to Cross-site Scripting XSS. The vulnerability exists in upload function at bootstrap.php because due to improper sanitization of inputs which allows an attacker to inject and execute arbitrary javascript...
RHEL 7 : subscription-manager (RHSA-2023:4701)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4701 advisory. The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the Red Hat...
GHSA-G3MV-64H3-H482 Cockpit Cross-site Scripting vulnerability
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit version 2.6.3 and prior. A patch is available at commit 30609466c817e39f9de1871559603e93cd4d0d0c and anticipated to be part of version 2.6.4...
CVE-2023-4451
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4451 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4451
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4451
Cockpit (cockpit-hq/cockpit) before version 2.6.4 is vulnerable to Reflected Cross-site Scripting (XSS) via the install/index.php interaction, due to insufficient sanitization/encoding of the space parameter in the installation interface. Exploitation could allow an unauthenticated attacker to in...
Cockpit 跨站脚本漏洞
Cockpit is an interactive server management interface. A cross-site scripting vulnerability exists in cockpit versions prior to 2.6.4. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
PT-2023-29266
Name of the Vulnerable Software and Affected Versions cockpit versions prior to 2.6.4 Description The issue is related to Cross-site Scripting XSS - Reflected in the GitHub repository cockpit-hq/cockpit. A patch is available and is anticipated to be part of version 2.6.4. Recommendations For...
CVE-2023-4451: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
GHSA-FF45-2JP9-69JC Cockpit Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit version 2.6.3 and prior. A patch is available at commit 36d1d4d256cbbab028342ba10cc493e5c119172c and anticipated to be part of version 2.6.4...
GHSA-RMGX-3W4R-XCFP Cockpit Cross-site Scripting vulnerability
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit version 2.6.3 and prior. A patch is available at commit 2a93d391fbd2dd9e730f65d43b29beb65903d195 and anticipated to be part of version 2.6.4...