High
CVE-2010-2235
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
High
CVE-2012-2395
Cobbler subject to Command Injection
Medium
CVE-2011-4953
Cobbler vulnerable to code injection via unsafe YAML loading
High
CVE-2008-6954
Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability
Medium
CVE-2014-3225
Cobbler Path Traversal vulnerability
Medium
CVE-2018-1000225
Cobbler XSS Vulnerability
Medium
CVE-2016-9605
Cobbler Arbitrary File Read
High
CVE-2011-4952
Cobbler Web Interface Lacks CSRF Protection
Critical
CVE-2024-47533
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
Critical
CVE-2017-1000469
Cobbler vulnerable to arbitrary code execution
Critical
CVE-2018-10931
Cobbler has Exposed Dangerous Method or Function
Critical
CVE-2018-1000226
Cobbler Improper Validation of Security Tokens
Medium
CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.
High
CVE-2021-45083
Incorrect Default Permissions in Cobbler
High
CVE-2021-45082
Command Injection in Cobbler
High
CVE-2021-40325
Cobbler before 3.3.0 allows authorization bypass for modification of settings.
High
CVE-2021-40324
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
High
CVE-2021-40323
Cobbler before 3.3.0 allows log poisoning
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.