The vulnerability of the userprefs component in the software platform for collaborative development of SAP NetWeaver Development Infrastructure Cockpit allows a attacker to execute arbitrary code.

The vulnerability of the userprefs component /nwdicockpit/srv/data/ of the software development platform for SAP NetWeaver Development Infrastructure Cockpit is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute...

Important: Red Hat Bug Fix Advisory: cockpit bug fix update

Updated cockpit packages that fix two bugs are now available for Red Hat Enterprise Linux 7 Extras. Cockpit is a server administration interface that makes it easy to administer GNU/Linux servers through a web browser. This update fixes two bugs, including this: The cockpit dashboard has been...

Moderate: Red Hat Bug Fix Advisory: Important: redhat-virtualization-host bug fix and enhancement update

Updated redhat-virtualization-host packages that fix several bugs and add various enhancements are now available. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat...

PT-2018-2889 · Red Hat +2 · Cockpit +3

Name of the Vulnerable Software and Affected Versions: Cockpit versions prior to 184 Description: The issue is caused by a buffer overflow in memory due to incorrect use of glib's base64 decode functionality. This can be exploited by a remote attacker using a specially crafted request with an...

Agentejo Cockpit Cross-Site Request Forgery Vulnerability

Agentejo Cockpit is a management system for managing structured content on websites. A cross-site request forgery vulnerability exists in Agentejo Cockpit version 0.6.2. A remote attacker can use this vulnerability to perform unauthorized actions e.g., change API tokens and passwords...

Agentejo Cockpit Cross-Site Scripting Vulnerability

Agentejo Cockpit is a management system for managing structured content on websites. A cross-site scripting vulnerability exists in Agentejo Cockpit version 0.6.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Agentejo Cockpit Directory Traversal Vulnerability

Agentejo Cockpit is a management system for managing structured content on websites. A directory traversal vulnerability exists in Agentejo Cockpit version 0.6.2, which arises from a program that does not properly validate a file before performing operations on it. An attacker can exploit the...

Directory traversal

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...

CVE-2018-15540

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...

CVE-2018-15540

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...

CVE-2018-15539

Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc...

CVE-2018-15539

Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc...

CVE-2018-15538

Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities...

Cross site scripting

Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities...

Cross site request forgery (csrf)

Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc...

CVE-2018-15538

Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities...

CVE-2018-15539

Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc...

CVE-2018-15540

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...

CVE-2018-15539

Agentejo Cockpit (Cockpit CMS) is affected by CVE-2018-15539 due to a lack of anti-CSRF protection. Multiple connected sources confirm a CSRF vulnerability that enables unauthorized actions such as changing API tokens and passwords. The CNVD entry explicitly notes a CSRF vulnerability in Cockpit ...

CVE-2018-15538

CVE-2018-15538 affects Agentejo Cockpit, a CMS for managing structured content. The CNVD entry CNVD-2018-21183 documents a Cross-Site Scripting vulnerability in Cockpit, specifically affecting version 0.6.2, enabling a remote attacker to inject arbitrary web script or HTML. The 0.6.2 release refe...