Advisories · Technology
Cockpit HQ Cockpit CMS.
Every CVE that names Cockpit HQ Cockpit CMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename
- Cockpit HQ Cockpit CMS
- Command injection
- CVSS 8.7 High
Cockpit CMS Path Traversal via Bucket Name in Bucket File Storage API
- Cockpit HQ Cockpit CMS
- Path traversal
- CVSS 8.7 High
Cockpit CMS Missing Authorization in Bucket File Storage API
- Cockpit HQ Cockpit CMS
- Broken access control