Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux 7/cockpit
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Potential XSS vulnerability in jQuery
CVE-2020-11022 · GHSA-GXR4-XJJ5-5PX2
athlon1600/youtube-downloader
components/jquery
Composer
Maven
npm
NuGet
Red Hat
RubyGems
Medium
Fix reported
2026-07-09
cockpit: cockpit: Denial of Service via unbounded fragmented WebSocket messages
CVE-2026-91150
Red Hat Enterprise Linux 7/cockpit
Red Hat OpenShift Dev Spaces/devspaces/udi-base-rhel10
Red Hat
High
No fix reported
Not recorded
cockpit: Cockpit: Local privilege escalation via insecure symlink handling in public key addition helper
CVE-2026-91151
Red Hat Enterprise Linux 7/cockpit
Red Hat OpenShift Dev Spaces/devspaces/udi-base-rhel10
Red Hat
High
No fix reported
Not recorded
cockpit: cockpit-storaged: Tang keyserver address from an untrusted LUKS header clevis token reaches curl's argument vector as an option
CVE-2026-125672
Red Hat Enterprise Linux 10/cockpit
Red Hat Enterprise Linux 6/cockpit
Red Hat
Medium
No fix reported
Not recorded
cockpit: pages vulnerable to clickjacking
CVE-2021-3660
Red Hat Enterprise Linux 7/cockpit
Red Hat OpenShift Container Platform 3.11/cockpit
Red Hat
Low
No fix reported
Not recorded
cockpit: authenticates with revoked certificates
CVE-2021-3698
Red Hat Enterprise Linux 7/cockpit
Red Hat OpenShift Container Platform 3.11/cockpit
Red Hat
Medium
No fix reported
Not recorded
gnutls: rejects certificate chain with distributed trust
CVE-2024-0567
Red Hat Enterprise Linux 6/gnutls
Red Hat Enterprise Linux 7/cockpit
Red Hat
Medium
No fix reported
Not recorded
cockpit: Authenticated user can kill any process when enabling pam_env's user_readenv option
CVE-2024-6126
Red Hat Enterprise Linux 7/cockpit
Red Hat Enterprise Linux 8/cockpit
Red Hat
Low
No fix reported
Not recorded
cockpit: Cockpit CMS: Arbitrary file read and code execution via path traversal
CVE-2026-58467
Red Hat Enterprise Linux 10/cockpit
Red Hat Enterprise Linux 7/cockpit
Red Hat
High
No fix reported
Not recorded
cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via CockpitLang cookie in send_login_html
CVE-2026-76235
Red Hat Enterprise Linux 7/cockpit
Red Hat
Medium
No fix reported
Not recorded
cockpit: Cockpit: Unauthorized modification of login records via integer overflow
CVE-2026-91142
Red Hat Enterprise Linux 10/cockpit
Red Hat Enterprise Linux 7/cockpit
Red Hat
Low
No fix reported
Not recorded
cockpit: Cockpit: Denial of Service via unbounded connection thread spawning
CVE-2026-91149
Red Hat Enterprise Linux 7/cockpit
Red Hat Enterprise Linux 8/cockpit
Red Hat
High
No fix reported
Not recorded
cockpit: Cockpit: Denial of Service in `cockpit-ws` due to URL-root handling without a trailing slash
CVE-2026-91147
Red Hat Enterprise Linux 7/cockpit
Red Hat OpenShift Dev Spaces/devspaces/udi-base-rhel10
Red Hat
Medium
No fix reported
Not recorded
