İçeriğe atla
Noroxi

agentejo kayıtları

agentejo üreticisine ait 31 yayımlanmış kayıt. Bunların 0 tanesi sahada sömürüldü (CISA KEV listesinde), 2 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %6,5
Pre-auth RCE
3
Düzeltme kaydı olan
%41,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 18
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

31 kayıt
  • CVE-2020-35847
    68Bu hafta

    Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.

    KritikCVSS 9,8SilahlaştırılmışEPSS %98

    agentejo · cockpit29 Ara 2020

  • CVE-2020-35846
    67Bu hafta

    Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.

    KritikCVSS 9,8SilahlaştırılmışEPSS %93

    agentejo · cockpit29 Ara 2020

  • CVE-2020-35848
    61Bu hafta

    Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.

    KritikCVSS 9,8Kavram kanıtıEPSS %74

    agentejo · cockpit29 Ara 2020

  • CVE-2020-35131
    54Planlayın

    Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/M

    KritikCVSS 9,8Kavram kanıtıEPSS %50

    agentejo · cockpit8 Oca 2021

  • CVE-2018-15540
    40Planlayın

    Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to un

    KritikCVSS 9,8İstismar yokEPSS %2

    agentejo · cockpit15 Eki 2018

  • CVE-2022-2713
    39İzleyin

    Insufficient Session Expiration in cockpit-hq/cockpit

    KritikCVSS 9,8İstismar yokEPSS %1

    agentejo · cockpit8 Ağu 2022

  • CVE-2024-4825
    39İzleyin

    Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo

    KritikCVSS 9,8İstismar yokEPSS %0

    agentejo · cockpit14 May 2024

  • CVE-2017-14611
    37İzleyin

    SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts v

    KritikCVSS 9,1İstismar yokEPSS %1

    agentejo · cockpit10 Nis 2018

  • CVE-2022-2818
    36İzleyin

    Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit

    YüksekCVSS 8,8İstismar yokEPSS %1

    agentejo · cockpit15 Ağu 2022

  • CVE-2023-4195
    35İzleyin

    PHP Remote File Inclusion in cockpit-hq/cockpit

    YüksekCVSS 8,8İstismar yokEPSS %1

    agentejo · cockpit6 Ağu 2023

  • CVE-2023-1313
    35İzleyin

    Unrestricted Upload of File with Dangerous Type in cockpit-hq/cockpit

    YüksekCVSS 8,8İstismar yokEPSS %0

    agentejo · cockpit10 Mar 2023

  • CVE-2018-15539
    35İzleyin

    Agentejo Cockpit lacks an anti-CSRF protection mechanism.

    YüksekCVSS 8,8İstismar yokEPSS %0

    agentejo · cockpit15 Eki 2018

  • CVE-2023-37650
    35İzleyin

    A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands.

    YüksekCVSS 8,8İstismar yokEPSS %0

    agentejo · cockpit20 Tem 2023

  • CVE-2023-0759
    35İzleyin

    Privilege Chaining in cockpit-hq/cockpit

    YüksekCVSS 8,8İstismar yokEPSS %0

    agentejo · cockpit9 Şub 2023

  • CVE-2023-37649
    30İzleyin

    Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.

    YüksekCVSS 7,5İstismar yokEPSS %0

    agentejo · cockpit20 Tem 2023

  • CVE-2026-31891
    26İzleyin

    Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    agentejo · cockpit18 Mar 2026

  • CVE-2020-14408
    25İzleyin

    An issue was discovered in Agentejo Cockpit 0.10.2.

    OrtaCVSS 6,1Kavram kanıtıEPSS %3

    agentejo · cockpit17 Haz 2020

  • CVE-2023-4451
    25İzleyin

    Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    agentejo · cockpit20 Ağu 2023

  • CVE-2023-41564
    24İzleyin

    An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via upl

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    agentejo · cockpit8 Eyl 2023

  • CVE-2018-15538
    24İzleyin

    Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities.

    OrtaCVSS 6,1İstismar yokEPSS %0

    agentejo · cockpit15 Eki 2018

  • CVE-2021-32857
    24İzleyin

    Cockpit vulnerable to Cross-site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    agentejo · cockpit21 Şub 2023

  • CVE-2023-4321
    24İzleyin

    Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

    OrtaCVSS 6,1İstismar yokEPSS %0

    agentejo · cockpit14 Ağu 2023

  • CVE-2023-4432
    24İzleyin

    Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

    OrtaCVSS 6,1İstismar yokEPSS %0

    agentejo · cockpit18 Ağu 2023

  • CVE-2023-1160
    22İzleyin

    Use of Platform-Dependent Third Party Components in cockpit-hq/cockpit

    OrtaCVSS 5,5İstismar yokEPSS %0

    agentejo · cockpit2 Mar 2023

  • CVE-2023-4395
    21İzleyin

    Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

    OrtaCVSS 5,4İstismar yokEPSS %0

    agentejo · cockpit17 Ağu 2023