154 matches found
CVE-2023-36663
OpenITCOCKPIT (It-novum) 4.6.4 is vulnerable to SQL injection via the API interface’s sort parameter when accessed by authenticated users, due to a flaw in the input handling. Affects versions 4.6.4 prior to 4.6.5. Mitigation: upgrade to 4.6.5 or apply vendor-provided security update; as a tempor...
It-novum OpenITCOCKPIT SQL注入漏洞
It-novum OpenITCOCKPIT is an open source system monitoring tool from It-novum, Germany. A security vulnerability exists in it-novum openITCOCKPIT, which originates from an SQL injection via the sort parameter of the API interface...
CVE-2023-36663
it-novum openITCOCKPIT aka open IT COCKPIT 4.6.4 before 4.6.5 allows SQL Injection by authenticated users via the sort parameter of the API interface...
CVE-2023-36663
it-novum openITCOCKPIT aka open IT COCKPIT 4.6.4 before 4.6.5 allows SQL Injection by authenticated users via the sort parameter of the API interface...
PT-2023-25666 · Unknown · Openitcockpit
Name of the Vulnerable Software and Affected Versions: openITCOCKPIT versions 4.6.4 through 4.6.4 Description: The issue allows SQL Injection via the sort parameter of the API interface, which can be exploited by authenticated users. Recommendations: For openITCOCKPIT version 4.6.4, update to...
CVE-2023-36663
it-novum openITCOCKPIT aka open IT COCKPIT 4.6.4 before 4.6.5 allows SQL Injection by authenticated users via the sort parameter of the API interface...
CVE-2023-36663: Improper Neutralization of Special Elements used in an SQL Command
it-novum openITCOCKPIT aka open IT COCKPIT 4.6.4 before 4.6.5 allows SQL Injection by authenticated users via the sort parameter of the API interface...
CVE-2023-3218
Race Condition within a Thread in GitHub repository it-novum/openitcockpit prior to 4.6.5...
CVE-2023-3218
Race Condition within a Thread in GitHub repository it-novum/openitcockpit prior to 4.6.5...
CVE-2023-3218 Race Condition within a Thread in it-novum/openitcockpit
Race Condition within a Thread in GitHub repository it-novum/openitcockpit prior to 4.6.5...
OpenITCOCKPIT 安全漏洞
It-novum OpenITCOCKPIT is an open source set of system monitoring tools from It-novum, Germany. A security vulnerability exists in OpenITCOCKPIT versions prior to 4.6.5 that stems from the presence of a race condition within a thread...
CVE-2023-3218 Race Condition within a Thread in it-novum/openitcockpit
Race Condition within a Thread in GitHub repository it-novum/openitcockpit prior to 4.6.5...
CVE-2023-3218 Race Condition within a Thread in it-novum/openitcockpit
Race Condition within a Thread in GitHub repository it-novum/openitcockpit prior to 4.6.5...
CVE-2023-3218
OpenITCOCKPIT is affected by CVE-2023-3218 due to a race condition within a thread in the application’s code path prior to version 4.6.5. The vulnerability stems from concurrent thread execution that can lead to inconsistent state or logic errors during operations in the affected release lineage....
CVE-2023-3218: Race Condition within a Thread
Race Condition within a Thread in GitHub repository it-novum/openitcockpit prior to 4.6.5...
It-novum OpenITCOCKPIT Encryption Issues Vulnerability
It-novum OpenITCOCKPIT is a set of open source system monitoring tools from Germany's It-novum. An encryption issue vulnerability exists in It-novum openITCOCKPIT versions prior to 3.7.3. The vulnerability stems from a network system or product that does not properly use the relevant cryptographi...
It-novum OpenITCOCKPIT Cross-Site Scripting Vulnerability
It-novum OpenITCOCKPIT is a set of open source system monitoring tools from Germany's It-novum. A cross-site scripting vulnerability exists in It-novum openITCOCKPIT versions prior to 3.7.3. The vulnerability stems from the lack of proper validation of client-side data by the WEB application, and...
openITCOCKPIT Command Execution Vulnerability
It-novum OpenITCOCKPIT is a set of open source system monitoring tools from Germany's It-novum. A security vulnerability exists in the Web-based terminal in It-novum openITCOCKPIT versions prior to 3.7.3. An attacker can exploit this vulnerability to execute arbitrary operating system commands wi...
It-novum OpenITCOCKPIT Code Issue Vulnerability
It-novum OpenITCOCKPIT is a set of open source system monitoring tools from Germany's It-novum. A code issue vulnerability exists in the app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php file in It-novum openITCOCKPIT versions prior to 3.7.3. The vulnerability can be exploite...