EUVD-2019-6480

Malware in sbrugna...

EUVD-2019-6481

Malware in sbrugna...

EUVD-2019-6482

Malware in sbrugna...

EUVD-2019-6483

Malware in sbrugna...

EUVD-2019-6484

Malware in sbrugna...

CVE-2019-15493

openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21...

CVE-2019-15490

openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21...

CVE-2019-15492

openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21...

CVE-2019-15491

openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21...

CVE-2019-15494

openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21...

CVE-2019-15490

openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21...

Cross site scripting

openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21...

Server side request forgery (ssrf)

openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21...

Session fixation

openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21...

Cross site request forgery (csrf)

openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21...

Code injection

openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21...

CVE-2019-15494

openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21...

CVE-2019-15494

OpenITCOCKPIT before version 3.7.1 is affected by an SSRF vulnerability (CVE-2019-15494). The issue arises in the affected component/functionality as described in the sources, with a fixed release available as openITCOCKPIT-3.7.1. The connected documents confirm the vulnerability and the remediat...

CVE-2019-15493

openITCOCKPIT prior to 3.7.1 is affected by CVE-2019-15493, allowing deletion of files (RVID 4-445b21). The connected documents confirm the vulnerable platform and impact, but do not provide deeper root-cause details. A patched release, 3.7.1 (tag openITCOCKPIT-3.7.1), is available as remediation...

CVE-2019-15492

OpenITCOCKPIT is affected by CVE-2019-15492: before version 3.7.1 it is vulnerable to reflected XSS (RVID 3-445b21). Impact described as cross-site scripting could allow an attacker to execute client-side code in the context of an authenticated user. The public references indicate a fixed release...