Browse CVEs

CRITICAL 9.8 CVE-2025-70981 CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter. Cordys Crm Mitigation only Fix from $2,3002026-02-12 MEDIUM 6.5 CVE-2025-14117 A vulnerability has been found in fit2cloud Halo 2.21.10. Impacted is an unknown function. The manipulation leads to cross-site request forgery. The … Halo No fix yet Fix from $1,6002025-12-06 HIGH 8.8 CVE-2025-56413 OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to execute arbitrary commands via the operation paramete… 1panel Mitigation only Fix from $1,9502025-09-10 HIGH 7.8 CVE-2023-50612 Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local attackers to escalate privileges and obtain sensitive … Cloudexplorer Lite No fix yet Fix from $1,9502024-01-06 CRITICAL 9.8 CVE-2023-48193 Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the command filtering… Jumpserver Mitigation only Fix from $2,3002023-11-28 HIGH 7.5 CVE-2023-42147 An issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the login key component. Cloudexplorer Lite No fix yet Fix from $1,9502023-09-20 CRITICAL 9.8 CVE-2023-42405 SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the `sort` parameter to taskService.list(), … Rackshift No fix yet Fix from $2,3002023-09-14 CRITICAL 9.8 CVE-2023-39966 1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file write vulnerability could lead … 1panel No fix yet Fix from $2,3002023-08-10 HIGH 7.5 CVE-2023-39964 1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read ar… 1panel No fix yet Fix from $1,9502023-08-10