Browse CVEs

HIGH 8.1 CVE-2023-2845 Improper Access Control in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0. Cloudexplorer Lite 1.1.0+ Fix from $1,9502023-05-23 CRITICAL 9.9 CVE-2023-28110 Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, refactoring coco's SSH/SFTP serv… Koko 2.28.8+ Fix from $2,3002023-03-16 CRITICAL 9.8 CVE-2023-22480EPSS 67% KubeOperator is an open source Kubernetes distribution focused on helping enterprises plan, deploy and operate production-level K8s clusters. In Kube… Kubeoperator 3.16.4+ Fix from $2,3002023-01-14 HIGH 7.5 CVE-2023-22478 KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in… Kubepi 1.6.4+ Fix from $1,9502023-01-14 MEDIUM 6.5 CVE-2023-22479 KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are s… Kubepi 1.6.4+ Fix from $1,6002023-01-10 CRITICAL 9.8 CVE-2023-22463EPSS 70% KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys f… Kubepi 1.6.3+ Fix from $2,3002023-01-04 MEDIUM 5.4 CVE-2022-22123 In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article title. An authenticated attacker can … Halo after 1.4.17 Fix from $1,6002022-01-13 MEDIUM 5.4 CVE-2022-22124 In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image. An authenticated attacker can … Halo after 1.4.17 Fix from $1,6002022-01-13