Skip to contentFit2cloud vulnerabilities
Newest
- fit2cloud cloudexplorer liteAn issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the...CVE-2023-421477.5 High
- fit2cloud jumpserverJumpServer session replays download without authenticationCVE-2023-42442Public exploitEPSS 63.0%8.2 High
- fit2cloud rackshiftSQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary...CVE-2023-424059.8 Critical
- fit2cloud cloudexplorer lite, cloudexplorer-dev cloudexplorer-lite +1 moreCloudExplorer Lite sensitive information leakage vulnerabilityCVE-2023-395197.5 High
- 1panel-dev 1panel1Panel arbitrary file write vulnerability exists in the backgroundCVE-2023-39966Fix available7.5 High
- 1panel-dev 1panel1Panel Unauthorized access in BackendCVE-2023-39965Fix available6.5 Medium
- 1panel-dev 1panel1Panel O&M management panel has a background arbitrary file reading vulnerabilityCVE-2023-39964Fix available7.5 High
- fit2cloud cloudexplorer lite, cloudexplorer-dev cloudexplorer-lite +1 moreCommand injection vulnerability in module management function in CloudExplorer LiteCVE-2023-386929.8 Critical
- 1panel-dev kubepiLeak password hash of any userCVE-2023-37916Fix available6.5 Medium
- 1panel-dev kubepiPrivilege Escalation in kubepiCVE-2023-37917Fix available9.1 Critical
- 1panel-dev 1panelCommand injection in firewall ip functionality in 1PanelCVE-2023-37477Fix available7.2 High
- 1panel-dev 1panel1Panel vulnerable to command injection when adding container repositoriesCVE-2023-36457Fix available6.3 Medium
- 1panel-dev 1panel1Panel vulnerable to ommand injection when entering the container terminalCVE-2023-36458Fix available6.3 Medium
- cloudexplorer-dev cloudexplorer-lite, fit2cloud cloudexplorer lite +1 moreWeak passwords allowed in cloudexplorer-liteCVE-2023-342406.5 Medium
- cloudexplorer-dev cloudexplorer-dev/cloudexplorer-lite, fit2cloud cloudexplorer lite +1 moreWeak Password Requirements in cloudexplorer-dev/cloudexplorer-liteCVE-2023-34236.5 Medium
- fit2cloud cloudexplorer, cloudexplorer-dev cloudexplorer-lite +1 moreUsers can add themselves to any organization in CloudExplorer LiteCVE-2023-323167.1 High
- fit2cloud cloudexplorer, cloudexplorer-dev cloudexplorer-lite +1 moreThe CloudExplorer Lite missing permissions checkCVE-2023-32311Public exploit7.1 High
- fit2cloud linaJumpserver 2.10.0 <= version <= 2.26.0 contains multiple stored XSS vulnerabilities because of...CVE-2022-422255.4 Medium
- cloudexplorer-dev cloudexplorer-dev/cloudexplorer-lite, fit2cloud cloudexplorer lite +1 moreImproper Access Control in cloudexplorer-dev/cloudexplorer-liteCVE-2023-28458.8 High
- cloudexplorer-dev cloudexplorer-dev/cloudexplorer-lite, fit2cloud cloudexplorer lite +1 moreAuthorization Bypass Through User-Controlled Key in cloudexplorer-dev/cloudexplorer-liteCVE-2023-28447.2 High
- fit2cloud jumpserver, koko +1 moreJumpServer Koko vulnerable to Command Injection for Kubernetes ConnectionCVE-2023-281105.7 Medium
- fit2cloud kubeoperatorKubeOperator is vulnerable to unauthorized access to system APICVE-2023-22480EPSS 66.8%7.3 High
- 1panel-dev kubepiKubePi vulnerable to session fixation attackCVE-2023-22479Fix available7.5 High
- 1panel-dev kubepiKubePi is vulnerable to missing authorizationCVE-2023-22478Fix available7.3 High
- 1panel-dev kubepiKubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT tokenCVE-2023-22463Fix availableEPSS 69.7%9.8 Critical
- fit2cloud haloHalo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \admin...CVE-2022-280744.8 Medium
- fit2cloud haloHalo CMS - Stored Cross-Site Scripting (XSS) in Profile ImageCVE-2022-221245.4 Medium
- fit2cloud haloHalo CMS - Stored Cross-Site Scripting (XSS) in Article's TitleCVE-2022-221235.4 Medium