Vulnerabilities (CVE)

Filtered by vendor Cobbler Project Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-45081 1 Cobbler Project 1 Cobbler 2023-08-08 4.3 MEDIUM 5.9 MEDIUM
An issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol instead of the more secure HTTPS.
CVE-2016-9605 1 Cobbler Project 1 Cobbler 2019-10-09 4.3 MEDIUM 6.1 MEDIUM
A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation.