Skip to content
Fit2cloud vulnerabilities
Newest
-
fit2cloud metersphere
fit2cloud MeterSphere Swagger3 Swagger3ParserApiDefinition.java Swagger3ParserApiDefinition.testUrlTimeout server-side request forgery
CVE-2026-109189
5.3 Medium
-
dataease sqlbot
SQLBot: Unauthorized Access Vulnerability
CVE-2026-42463
8.6 High
-
dataease sqlbot
SQLBot prompt injection allows arbitrary SQL execution and remote code execution
CVE-2026-33324
9.4 Critical
-
dataease sqlbot
SQLBot: RCE via SQL Injection in Excel Upload Endpoint
CVE-2026-32950
8.6 High
-
dataease sqlbot
SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL
CVE-2026-32949
8.7 High
-
dataease sqlbot
SQLBot: Remote Code Execution via Terminology Poisoning
CVE-2026-32622
8.6 High
-
fit2cloud jumpserver
JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering
CVE-2026-31864
6.8 Medium
-
fit2cloud jumpserver
JumpServer Improper Certificate Validation in Custom SMS API Client
CVE-2026-31798
5.0 Medium
-
dataease sqlbot
Dataease SQLBot JWT Token auth.py validateEmbedded signature verification
CVE-2025-15598
6.3 Medium
-
dataease sqlbot
Dataease SQLBot API Endpoint assistant.py access control
CVE-2025-15597
5.3 Medium
-
fit2cloud cordys crm
CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list)...
CVE-2025-70981
9.8 Critical
-
dataease sqlbot
SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability
CVE-2025-69285
7.7 High
-
1panel-dev 1panel
1panel App Store vulnerable to Cross-site Scripting
CVE-2026-23525
6.4 Medium
-
1panel-dev 1panel
1Panel CSRF Web Port Configuration Change
CVE-2025-34429
7.0 High
-
1panel-dev 1panel
1Panel CSRF Panel Name Modification
CVE-2025-34430
5.1 Medium
-
1panel-dev 1panel
1Panel CSRF in Change Username Functionality Allows Account Lockout
CVE-2025-34410
7.0 High
-
1panel-dev 1panel
1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers
CVE-2025-66508
Fix available
6.5 Medium
-
1panel-dev 1panel
1Panel – CAPTCHA Bypass via Client-Controlled Flag
CVE-2025-66507
Fix available
7.5 High
-
fit2cloud halo
fit2cloud Halo cross-site request forgery
CVE-2025-14117
5.3 Medium
-
fit2cloud jumpserver
JumpServer has an Open Redirect Vulnerability
CVE-2025-58044
5.5 Medium
-
fit2cloud jumpserver
JumpServer Unauthorized LDAP Configuration Access via WebSocket
CVE-2025-62795
7.1 High
-
fit2cloud jumpserver
JumpServer Connection Token Leak Vulnerability
CVE-2025-62712
9.6 Critical
-
fit2cloud 1panel
OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to...
CVE-2025-56413
8.8 High
-
1panel-dev 1panel
1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution
CVE-2025-54424
Public exploitFix available
8.1 High
-
fit2cloud jumpserver
JumpServer has a Kubernetes Token Leak Vulnerability
CVE-2025-27095
4.3 Medium
-
fit2cloud jumpserver
Arbitrary File Read in Ansible Playbooks in Jumpserver
CVE-2024-40628
10.0 Critical
-
fit2cloud jumpserver
Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver
CVE-2024-40629
10.0 Critical
-
1panel-dev 1panel
1Panel SQL injection
CVE-2024-39911
Fix available
10.0 Critical
-
1panel-dev 1panel
a sqlinjection in 1Panel
CVE-2024-39907
Fix available
EPSS 29.2%
9.8 Critical
-
1panel-dev 1panel
Arbitrary file write vulnerability in 1Panel
CVE-2024-34352
Fix available
6.5 Medium
-
1panel-dev 1panel
1Panel's password verification is suspected to have a timing attack vulnerability
CVE-2024-30257
Fix available
3.9 Low
-
fit2cloud jumpserver
JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery
CVE-2024-29202
10.0 Critical
-
fit2cloud jumpserver
JumpServer's insecure Ansible playbook validation leads to RCE in Celery
CVE-2024-29201
10.0 Critical
-
fit2cloud jumpserver
JumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leaked
CVE-2024-29020
4.6 Medium
-
fit2cloud jumpserver
JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality
CVE-2024-29024
4.6 Medium
-
1panel-dev 1panel
1Panel swap baseApi.UpdateDeviceSwap command injection
CVE-2024-2352
Fix available
6.3 Medium
-
1panel-dev 1panel
1Panel open source panel project has an unauthorized vulnerability.
CVE-2024-27288
Fix available
6.3 Medium
-
fit2cloud jumpserver
JumpServer Open Redirect Vulnerability
CVE-2024-24763
4.3 Medium
-
1panel-dev 1panel
1Panel set-cookie is missing the Secure keyword
CVE-2024-24768
Fix available
6.5 Medium
-
fit2cloud cloudexplorer lite
Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local...
CVE-2023-50612
7.8 High
-
fit2cloud jumpserver
Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to...
CVE-2023-48193
Disputed
9.8 Critical
-
fit2cloud jumpserver
JumpServer default admin user email leak password reset
CVE-2023-46138
3.7 Low
-
fit2cloud cloudexplorer lite, cloudexplorer-dev cloudexplorer-lite +1 more
CloudExplorer Lite permission bypass vulnerability
CVE-2023-44397
7.5 High
-
fit2cloud jumpserver
jumpserver is vulnerable to password brute-force protection bypass via arbitrary IP values
CVE-2023-46123
5.3 Medium
-
fit2cloud jumpserver
SSH public key login without private key challenge if mfa is enabled in jumpserver
CVE-2023-42818
Fix available
5.4 Medium
-
fit2cloud jumpserver
Remote code execution on the host system via MongoDB shell in jumpserver
CVE-2023-43651
Fix available
8.6 High
-
fit2cloud jumpserver
Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver
CVE-2023-43650
8.2 High
-
fit2cloud jumpserver
Non-MFA account takeover via using only SSH public key to login in jumpserver
CVE-2023-43652
8.2 High
-
fit2cloud jumpserver
Path traversal in Jumpserver
CVE-2023-42819
Public exploit
8.9 High
-
fit2cloud jumpserver
Random seed leakage in Jumpserver
CVE-2023-42820
Public exploit
7.0 High
- Show olderLoading…