Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 26
Reset filtersCockpit Vulnerable to Unrestricted Upload of File with Dangerous Type
Cockpit is vulnerable to directory traversal
Cockpit is vulnerable to arbitrary code execution
Cockpit has NoSQL Injection Through Content Aggregation Pipelines
Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()
Cockpit - Content Platform vulnerable to XSS through name or email argument names
Cockpit Arbitrary File Upload
Cockpit CMS contains an arbitrary file upload vulenrability
Cockpit CMS Cross-Site Scripting vulnerability
Cockpit CMS arbitrary file upload vulnerability
Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Cockpit PHP Remote File Inclusion vulnerability
Cockpit Cross-site Scripting vulnerability
Cockpit CMS vulnerable to incorrect access control
Cockpit CMS Cross-Site Request Forgery vulnerability
cockpit-hq/cockpit is vulnerable to unrestricted file uploads
Cockpit Uses Platform-Dependent Third Party Components
Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.