Login Request a demo
FI
Vendor
Fit2cloud
12 products with CVEs on record
78
CVEs
0
On KEV
0
New 30D
Products
JU
Jumpserver
Fit2cloud
9.9
24 CVEs0 on KEV0 new
1P
1panel
Fit2cloud
9.8
21 CVEs0 on KEV0 new
CL
Cloudexplorer Lite
Fit2cloud
9.8
9 CVEs0 on KEV0 new
SQ
Sqlbot
Fit2cloud
8.8
8 CVEs0 on KEV0 new
KU
Kubepi
Fit2cloud
9.8
5 CVEs0 on KEV0 new
HA
Halo
fit2cloud
6.5
4 CVEs0 on KEV0 new
CL
Cloudexplorer
Fit2cloud
4.3
2 CVEs0 on KEV0 new
CC
Cordys Crm
Fit2cloud
9.8
1 CVEs0 on KEV0 new
KO
Koko
Fit2cloud
9.9
1 CVEs0 on KEV0 new
KU
Kubeoperator
Fit2cloud
9.8
1 CVEs0 on KEV0 new
LI
Lina
Fit2cloud
5.4
1 CVEs0 on KEV0 new
RA
Rackshift
Fit2cloud
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-42463
SQ
Sqlbot
Fit2cloud
8.1
0%
May 13SQLBot: Unauthorized Access Vulnerability
CVE-2026-33324
SQ
Sqlbot
Fit2cloud
8.8
1%
May 5SQLBot prompt injection allows arbitrary SQL execution and remote code execution
CVE-2026-32950
SQ
Sqlbot
Fit2cloud
8.8
1%
Mar 20SQLBot: RCE via SQL Injection in Excel Upload Endpoint
CVE-2026-32949
SQ
Sqlbot
Fit2cloud
7.5
0%
Mar 20SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL
CVE-2026-32622
SQ
Sqlbot
Fit2cloud
8.8
1%
Mar 19SQLBot: Remote Code Execution via Terminology Poisoning
CVE-2026-31864
JU
Jumpserver
Fit2cloud
6.8
0%
Mar 13JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering
CVE-2026-31798
JU
Jumpserver
Fit2cloud
5.0
0%
Mar 13JumpServer Improper Certificate Validation in Custom SMS API Client
CVE-2025-15598
SQ
Sqlbot
Fit2cloud
5.9
0%
Mar 3Dataease SQLBot JWT Token auth.py validateEmbedded signature verification
CVE-2025-15597
SQ
Sqlbot
Fit2cloud
6.3
1%
Mar 2Dataease SQLBot API Endpoint assistant.py access control
CVE-2025-70981
CC
Cordys Crm
Fit2cloud
9.8
0%
Feb 12CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter
CVE-2025-69285
SQ
Sqlbot
Fit2cloud
6.1
0%
Jan 21SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability
CVE-2026-23525
1P
1panel
Fit2cloud
8.4
0%
Jan 181panel App Store vulnerable to Cross-site Scripting
CVE-2025-34429
1P
1panel
Fit2cloud
7.1
0%
Dec 101Panel CSRF Web Port Configuration Change
CVE-2025-34430
1P
1panel
Fit2cloud
4.3
0%
Dec 101Panel CSRF Panel Name Modification
CVE-2025-34410
1P
1panel
Fit2cloud
7.1
0%
Dec 101Panel CSRF in Change Username Functionality Allows Account Lockout
CVE-2025-66508
1P
1panel
Fit2cloud
6.5
0%
Dec 91Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers
CVE-2025-66507
1P
1panel
Fit2cloud
7.5
0%
Dec 91Panel – CAPTCHA Bypass via Client-Controlled Flag
CVE-2025-14117
HA
Halo
fit2cloud
6.5
0%
Dec 6fit2cloud Halo cross-site request forgery
CVE-2025-58044
JU
Jumpserver
Fit2cloud
6.1
0%
Dec 1JumpServer has an Open Redirect Vulnerability
CVE-2025-62795
JU
Jumpserver
Fit2cloud
7.1
0%
Oct 30JumpServer Unauthorized LDAP Configuration Access via WebSocket
CVE-2025-62712
JU
Jumpserver
Fit2cloud
8.1
0%
Oct 30JumpServer Connection Token Leak Vulnerability
CVE-2025-56413
1P
1panel
Fit2cloud
8.8
1%
Sep 10OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to execute arbitrary commands via the operation parameter to the…
CVE-2025-54424
1P
1panel
Fit2cloud
9.8
1%
Aug 11Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution
CVE-2025-27095
JU
Jumpserver
Fit2cloud
4.3
0%
Mar 31JumpServer has a Kubernetes Token Leak Vulnerability
CVE-2024-40628
JU
Jumpserver
Fit2cloud
9.1
1%
Jul 18Arbitrary File Read in Ansible Playbooks in Jumpserver
CVE-2024-40629
JU
Jumpserver
Fit2cloud
9.8
1%
Jul 18Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver
CVE-2024-39911
1P
1panel
Fit2cloud
9.8
5%
Jul 181Panel SQL injection
CVE-2024-39907
1P
1panel
Fit2cloud
9.8
29%
Jul 18a sqlinjection in 1Panel
CVE-2024-34352
1P
1panel
Fit2cloud
7.5
1%
May 9Arbitrary file write vulnerability in 1Panel
CVE-2024-30257
1P
1panel
Fit2cloud
5.9
0%
Apr 181Panel's password verification is suspected to have a timing attack vulnerability
CVE-2024-29202
JU
Jumpserver
Fit2cloud
9.9
6%
Mar 29JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery
CVE-2024-29201
JU
Jumpserver
Fit2cloud
9.9
6%
Mar 29JumpServer's insecure Ansible playbook validation leads to RCE in Celery
CVE-2024-29020
JU
Jumpserver
Fit2cloud
5.3
0%
Mar 29JumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leaked
CVE-2024-29024
JU
Jumpserver
Fit2cloud
5.3
0%
Mar 29JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality
CVE-2024-2352
1P
1panel
Fit2cloud
9.8
3%
Mar 101Panel swap baseApi.UpdateDeviceSwap command injection
CVE-2024-27288
1P
1panel
Fit2cloud
3.1
0%
Mar 61Panel open source panel project has an unauthorized vulnerability.
CVE-2024-24763
JU
Jumpserver
Fit2cloud
6.1
1%
Feb 20JumpServer Open Redirect Vulnerability
CVE-2024-24768
1P
1panel
Fit2cloud
7.5
0%
Feb 51Panel set-cookie is missing the Secure keyword
CVE-2023-50612
CL
Cloudexplorer Lite
Fit2cloud
7.8
0%
Jan 6Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local attackers to escalate privileges and obtain sensitive information via the cloud…
CVE-2023-48193
JU
Jumpserver
Fit2cloud
9.8
2%
Nov 28Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the command filtering function
CVE-2023-46138
JU
Jumpserver
Fit2cloud
5.3
0%
Oct 31JumpServer is an open source bastion host and maintenance security audit system that complies with 4A specifications
CVE-2023-44397
CL
Cloudexplorer Lite
Fit2cloud
9.8
1%
Oct 30CloudExplorer Lite is an open source, lightweight cloud management platform
CVE-2023-46123
JU
Jumpserver
Fit2cloud
5.3
1%
Oct 25jumpserver is an open source bastion machine, professional operation and maintenance security audit system that complies with 4A specifications
CVE-2023-43651
JU
Jumpserver
Fit2cloud
9.9
2%
Sep 27JumpServer is an open source bastion host
CVE-2023-42818
JU
Jumpserver
Fit2cloud
9.8
1%
Sep 27JumpServer is an open source bastion host
CVE-2023-43652
JU
Jumpserver
Fit2cloud
9.1
1%
Sep 27JumpServer is an open source bastion host
CVE-2023-43650
JU
Jumpserver
Fit2cloud
7.4
1%
Sep 27JumpServer is an open source bastion host
CVE-2023-42820
JU
Jumpserver
Fit2cloud
8.2
6%
Sep 27JumpServer is an open source bastion host
CVE-2023-42819
JU
Jumpserver
Fit2cloud
8.8
2%
Sep 27JumpServer is an open source bastion host
CVE-2023-42147
CL
Cloudexplorer Lite
Fit2cloud
7.5
0%
Sep 20An issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the login key component
CVE-2023-42442
JU
Jumpserver
Fit2cloud
5.3
63%
Sep 15JumpServer is an open source bastion host and a professional operation and maintenance security audit system
CVE-2023-42405
RA
Rackshift
Fit2cloud
9.8
1%
Sep 14SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the `sort` parameter to taskService.list(), bareMetalService.list(), and…
CVE-2023-39519
CL
Cloudexplorer Lite
Fit2cloud
4.9
1%
Aug 24Cloud Explorer Lite is an open source cloud management platform
CVE-2023-39966
1P
1panel
Fit2cloud
9.8
1%
Aug 101Panel is an open source Linux server operation and maintenance management panel
CVE-2023-39965
1P
1panel
Fit2cloud
4.3
0%
Aug 101Panel is an open source Linux server operation and maintenance management panel
CVE-2023-39964
1P
1panel
Fit2cloud
7.5
1%
Aug 101Panel is an open source Linux server operation and maintenance management panel
CVE-2023-38692
CL
Cloudexplorer Lite
Fit2cloud
9.8
3%
Aug 4CloudExplorer Lite is an open source, lightweight cloud management platform
CVE-2023-37917
KU
Kubepi
Fit2cloud
8.8
1%
Jul 21KubePi is an opensource kubernetes management panel
CVE-2023-37916
KU
Kubepi
Fit2cloud
7.5
1%
Jul 21KubePi is an opensource kubernetes management panel
CVE-2023-37477
1P
1panel
Fit2cloud
8.8
6%
Jul 181Panel is an open source Linux server operation and maintenance management panel