cobbler vulnerabilities

CRITICAL 9.8

PyPI

CVE-2024-47533

cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes

Jun 29, 2026

CRITICAL 9.8

PyPI

CVE-2018-1000226

Cobbler Improper Validation of Security Tokens

Jun 29, 2026

CRITICAL 9.8

PyPI

CVE-2017-1000469

Cobbler vulnerable to arbitrary code execution

Jun 29, 2026

CRITICAL 9.8

PyPI

CVE-2018-10931

Cobbler has Exposed Dangerous Method or Function

Jun 29, 2026

CRITICAL 9.8

PyPI

CVE-2017-1000469

Cobbler vulnerable to arbitrary code execution

May 14, 2022

CRITICAL 9.8

PyPI

CVE-2024-47533

cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes

Nov 18, 2024

CRITICAL 9.8

PyPI

CVE-2018-10931

Cobbler has Exposed Dangerous Method or Function

May 13, 2022

CRITICAL 9.8

PyPI

CVE-2018-1000226

Cobbler Improper Validation of Security Tokens

May 13, 2022

UNKNOWN

PyPI

CVE-2021-45083

Feb 20, 2022

UNKNOWN

PyPI

CVE-2021-45082

Feb 19, 2022

UNKNOWN

PyPI

CVE-2022-0860

Mar 11, 2022

UNKNOWN

PyPI

CVE-2021-40325

Oct 4, 2021

UNKNOWN

PyPI

CVE-2021-40324

Oct 4, 2021

UNKNOWN

PyPI

CVE-2021-40323

Oct 4, 2021

UNKNOWN

PyPI

CVE-2011-4953

Cobbler vulnerable to code injection via unsafe YAML loading

May 17, 2022

UNKNOWN

PyPI

CVE-2008-6954

Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability

May 17, 2022

UNKNOWN

PyPI

CVE-2012-2395

Cobbler subject to Command Injection

May 17, 2022

UNKNOWN

PyPI

CVE-2010-2235

Cobbler is vulnerable to code injection

May 17, 2022

HIGH 8.2

PyPI

CVE-2022-0860

Improper Authorization in cobbler

Mar 11, 2022

HIGH 7.1

PyPI

CVE-2021-45083

Incorrect Default Permissions in Cobbler

Feb 21, 2022

HIGH 7.5

PyPI

CVE-2021-40325

Cobbler before 3.3.0 allows authorization bypass for modification of settings.

Oct 5, 2021

HIGH 7.5

PyPI

CVE-2021-40324

Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.

Oct 5, 2021

CRITICAL 9.8

PyPI

CVE-2021-40323

Cobbler before 3.3.0 allows log poisoning

Oct 5, 2021

HIGH 7.8

PyPI

CVE-2021-45082

Command Injection in Cobbler

Feb 20, 2022

UNKNOWN

PyPI

CVE-2014-3225

Cobbler Path Traversal vulnerability

May 14, 2022

MEDIUM 6.1

PyPI

CVE-2016-9605

Cobbler Arbitrary File Read

May 13, 2022

MEDIUM 6.1

PyPI

CVE-2018-1000225

Cobbler XSS Vulnerability

May 14, 2022

HIGH 8.8

PyPI

CVE-2011-4952

Cobbler Web Interface Lacks CSRF Protection

Apr 22, 2022

cobbler

Vulnerabilities

cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes

Cobbler Improper Validation of Security Tokens

Cobbler vulnerable to arbitrary code execution

Cobbler has Exposed Dangerous Method or Function

Cobbler vulnerable to arbitrary code execution

cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes

Cobbler has Exposed Dangerous Method or Function

Cobbler Improper Validation of Security Tokens

CVE-2021-45083

CVE-2021-45082

CVE-2022-0860

CVE-2021-40325

CVE-2021-40324

CVE-2021-40323

Cobbler vulnerable to code injection via unsafe YAML loading

Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability

Cobbler subject to Command Injection

Cobbler is vulnerable to code injection

Improper Authorization in cobbler

Incorrect Default Permissions in Cobbler

Cobbler before 3.3.0 allows authorization bypass for modification of settings.

Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.

Cobbler before 3.3.0 allows log poisoning

Command Injection in Cobbler

Cobbler Path Traversal vulnerability

Cobbler Arbitrary File Read

Cobbler XSS Vulnerability

Cobbler Web Interface Lacks CSRF Protection

Start Securing