| cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changesCVE-2024-47533 · GHSA-M26C-FCGH-CP6HVersion ranges need review. |
cobbler |
PyPI |
Critical
|
Fix reported |
|
| Cobbler vulnerable to arbitrary code executionCVE-2017-1000469 · GHSA-96HW-V598-JVGHVersion ranges need review. |
cobblerRed Hat Satellite 5/cobbler |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Cobbler Improper Validation of Security TokensCVE-2018-1000226 · GHSA-F88Q-22G8-FRCGVersion ranges need review. |
cobblerRed Hat Enterprise Linux 8/cobbler |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Cobbler has Exposed Dangerous Method or FunctionCVE-2018-10931 · GHSA-8787-63PX-3M23Version ranges need review. |
cobbler |
PyPI |
Critical
|
Fix reported |
|
| Command Injection in CobblerCVE-2021-45082 · GHSA-6CM4-GM85-972CVersion ranges need review. |
cobbler |
PyPI |
High
|
Fix reported |
|
| Incorrect Default Permissions in CobblerCVE-2021-45083 · GHSA-5946-MPW5-PQXXVersion ranges need review. |
cobbler |
PyPI |
High
|
Fix reported |
|
| Cobbler before 3.3.0 allows log poisoningCVE-2021-40323 · GHSA-CPQF-3C3R-C9G2Version ranges need review. |
cobbler |
PyPI |
High
|
Fix reported |
|
| Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.CVE-2021-40324 · GHSA-4CFR-GJFX-FJ3XVersion ranges need review. |
cobbler |
PyPI |
High
|
Fix reported |
|
| Cobbler before 3.3.0 allows authorization bypass for modification of settings.CVE-2021-40325 · GHSA-CR3F-R24J-3CHWVersion ranges need review. |
cobbler |
PyPI |
High
|
Fix reported |
|
| Cobbler XSS VulnerabilityCVE-2018-1000225 · GHSA-Q9G5-98PM-W6Q7Version ranges need review. |
cobblerRed Hat Enterprise Linux 8/cobbler |
PyPIRed Hat |
Medium
|
No fix reported |
|
| Cobbler is vulnerable to code injection CVE-2010-2235 · GHSA-JHM7-38XJ-PVM8Version ranges need review. |
cobbler |
PyPI |
High
|
Fix reported |
|
| Cobbler subject to Command InjectionCVE-2012-2395 · GHSA-G34C-MG6M-XVXJVersion ranges need review. |
cobbler |
PyPI |
High
|
Fix reported |
|
| Cobbler vulnerable to code injection via unsafe YAML loadingCVE-2011-4953 · GHSA-HPJ3-5P46-G87WVersion ranges need review. |
cobbler |
PyPI |
Medium
|
Fix reported |
|
| Cobbler Path Traversal vulnerabilityCVE-2014-3225 · GHSA-XC7W-JVHX-P6Q9Version ranges need review. |
cobblerRed Hat Satellite 5/cobbler |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Cobbler Web Interface Kickstart Template Remote Privilege Escalation VulnerabilityCVE-2008-6954 · GHSA-P8W2-F44P-FMCJVersion ranges need review. |
cobbler |
PyPI |
High
|
Fix reported |
|
| Cobbler Web Interface Lacks CSRF ProtectionCVE-2011-4952 · GHSA-9FQR-PQC9-F7PJVersion ranges need review. |
cobbler |
PyPI |
High
|
Fix reported |
|
| Cobbler Arbitrary File ReadCVE-2016-9605 · GHSA-4VC9-4XPQ-77VMVersion ranges need review. |
cobbler |
PyPI |
Medium
|
No fix reported |
|
| Improper Authorization in cobblerCVE-2022-0860 · GHSA-MCG6-H362-CMQ5Version ranges need review. |
cobbler |
PyPI |
Medium
|
Fix reported |
|
