cockpit-project kayıtları
cockpit-project üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %75
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1021 Improper Restriction of Rendered UI Layers or Frames1
- CWE-295 Improper Certificate Validation1
- CWE-909 Missing Initialization of Resource1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2019-3804İstismar yok | It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack.cockpit-project · cockpit · CWE-909 | Yüksek7,5 | — | %4,8 | 26 Mar 2019 |
30İzleyin | CVE-2021-3698İstismar yok | A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Sercockpit-project · cockpit · CWE-295 | Yüksek7,5 | — | %0,7 | 10 Mar 2022 |
26İzleyin | CVE-2020-35850İstismar yok | An SSRF issue was discovered in cockpit-project.org Cockpit 234.cockpit-project · cockpit · CWE-918 | Orta6,5 | — | %1,6 | 29 Ara 2020 |
17İzleyin | CVE-2021-3660İstismar yok | Cockpit (and its plugins) do not seem to protect itself against clickjacking.cockpit-project · cockpit · CWE-1021 | Orta4,3 | — | %1,2 | 10 Mar 2022 |
- CVE-2019-380431İzleyin
It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack.
YüksekCVSS 7,5İstismar yokEPSS %4cockpit-project · cockpit26 Mar 2019
- CVE-2021-369830İzleyin
A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Ser
YüksekCVSS 7,5İstismar yokEPSS %0cockpit-project · cockpit10 Mar 2022
- CVE-2020-3585026İzleyin
An SSRF issue was discovered in cockpit-project.org Cockpit 234.
OrtaCVSS 6,5İstismar yokEPSS %1cockpit-project · cockpit29 Ara 2020
- CVE-2021-366017İzleyin
Cockpit (and its plugins) do not seem to protect itself against clickjacking.
OrtaCVSS 4,3İstismar yokEPSS %1cockpit-project · cockpit10 Mar 2022