AG
Vendor
Agentejo
33
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-13533 | CC Cockpit CMS agentejo | 5.3 | Jun 29 | agentejo Cockpit CMS htaccess config.yaml YAMLLoad file access |
| CVE-2026-31891 | CO Cockpit Agentejo | 6.5 | Mar 18 | Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw() |
| CVE-2025-7053 | CO Cockpit Agentejo | 6.1 | Jul 4 | Cockpit save cross site scripting |
| CVE-2024-4825 | CC Cockpit CMS Agentejo | 9.8 | May 13 | Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo |
| CVE-2024-2001 | CO Cockpit Agentejo | 5.4 | Feb 29 | Cross-Site Scripting vulnerability in Cockpit CMS |
| CVE-2023-41564 | CO Cockpit Agentejo | 6.1 | Sep 8 | An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file |
| CVE-2023-4451 | CO Cockpit Agentejo | 6.1 | Aug 20 | Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4 |
| CVE-2023-4433 | CO Cockpit Agentejo | 5.4 | Aug 19 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4 |
| CVE-2023-4432 | CO Cockpit Agentejo | 6.1 | Aug 19 | Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4 |
| CVE-2023-4422 | CO Cockpit Agentejo | 4.8 | Aug 18 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3 |
| CVE-2023-4395 | CO Cockpit Agentejo | 5.4 | Aug 17 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4 |
| CVE-2023-4321 | CO Cockpit Agentejo | 6.1 | Aug 14 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3 |
| CVE-2023-4196 | CO Cockpit Agentejo | 5.4 | Aug 6 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3 |
| CVE-2023-4195 | CO Cockpit Agentejo | 8.8 | Aug 6 | PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3 |
| CVE-2023-37650 | CO Cockpit Agentejo | 8.8 | Jul 20 | A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands |
| CVE-2023-37649 | CO Cockpit Agentejo | 7.5 | Jul 20 | Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data |
| CVE-2023-1313 | CO Cockpit Agentejo | 8.8 | Mar 10 | Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1 |
| CVE-2023-1160 | CO Cockpit Agentejo | 5.5 | Mar 3 | Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0 |
| CVE-2021-32857 | CO Cockpit Agentejo | 6.1 | Feb 21 | Cockpit is a content management system that allows addition of content management functionality to any site |
| CVE-2023-0780 | CO Cockpit Agentejo | 5.4 | Feb 11 | Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev |
| CVE-2023-0759 | CO Cockpit Agentejo | 8.8 | Feb 9 | Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8 |
| CVE-2022-2818 | CO Cockpit Agentejo | 8.8 | Aug 15 | Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2 |
| CVE-2022-2713 | CO Cockpit Agentejo | 9.8 | Aug 8 | Insufficient Session Expiration in cockpit-hq/cockpit |
| CVE-2020-35131 | CO Cockpit Agentejo | 9.8 | Jan 8 | Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated… |
| CVE-2020-35848 | CO Cockpit Agentejo | 9.8 | Dec 30 | Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function |
| CVE-2020-35847 | CO Cockpit Agentejo | 9.8 | Dec 30 | Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function |
| CVE-2020-35846 | CO Cockpit Agentejo | 9.8 | Dec 30 | Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function |
| CVE-2020-14408 | CO Cockpit Agentejo | 6.1 | Jun 17 | An issue was discovered in Agentejo Cockpit 0.10.2 |
| CVE-2018-15540 | CO Cockpit Agentejo | 9.8 | Oct 15 | Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access… |
| CVE-2018-15539 | CO Cockpit Agentejo | 8.8 | Oct 15 | Agentejo Cockpit lacks an anti-CSRF protection mechanism |
| CVE-2018-15538 | CO Cockpit Agentejo | 6.1 | Oct 15 | Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities |
| CVE-2017-14611 | CO Cockpit Agentejo | 9.1 | Apr 10 | SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter, related to use of… |