Vulnerabilities > Agentejo > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-09-08 CVE-2023-41564 Unrestricted Upload of File with Dangerous Type vulnerability in Agentejo Cockpit 2.6.3
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file.
network
low complexity
agentejo CWE-434
6.1
2023-08-20 CVE-2023-4451 Cross-site Scripting vulnerability in Agentejo Cockpit
Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.
network
low complexity
agentejo CWE-79
6.1
2023-08-19 CVE-2023-4432 Cross-site Scripting vulnerability in Agentejo Cockpit
Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.
network
low complexity
agentejo CWE-79
6.1
2023-08-19 CVE-2023-4433 Cross-site Scripting vulnerability in Agentejo Cockpit
Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4.
network
low complexity
agentejo CWE-79
5.4
2023-08-18 CVE-2023-4422 Cross-site Scripting vulnerability in Agentejo Cockpit
Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3.
network
low complexity
agentejo CWE-79
4.8
2023-08-17 CVE-2023-4395 Cross-site Scripting vulnerability in Agentejo Cockpit
Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4.
network
low complexity
agentejo CWE-79
5.4
2023-08-14 CVE-2023-4321 Cross-site Scripting vulnerability in Agentejo Cockpit
Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3.
network
low complexity
agentejo CWE-79
6.1
2023-08-06 CVE-2023-4196 Cross-site Scripting vulnerability in Agentejo Cockpit
Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3.
network
low complexity
agentejo CWE-79
5.4
2023-03-03 CVE-2023-1160 Use of Platform-Dependent Third Party Components vulnerability in Agentejo Cockpit
Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.
local
low complexity
agentejo CWE-1103
5.5
2023-02-21 CVE-2021-32857 Cross-site Scripting vulnerability in Agentejo Cockpit
Cockpit is a content management system that allows addition of content management functionality to any site.
network
low complexity
agentejo CWE-79
6.1