1Panel-dev

Records146All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical30CVSS 9.0–10.0

CVSS high43CVSS 7.0–8.9

Exploited now

1Panel-dev records in CISA KEV

No 1Panel-dev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jumpserver 24 records HIGH 1panel 21 records HIGH Cloudexplorer Lite 9 records HIGH Sqlbot 8 records HIGH Kubepi 5 records CRITICAL Halo 4 records MEDIUM Cloudexplorer 2 records MEDIUM Cordys Crm 1 record HIGH

Records

9 records in Cloudexplorer Lite · all components

TI-2023-20041 CVE-2023-38692

Command injection vulnerability in module management function in CloudExplorer Lite

HIGH 82

CloudExplorer Lite is an open source, lightweight cloud management platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03388 Published 2023-08-04 Fixed in 1.3.1 CWE-78

TI-2023-23903 CVE-2023-44397

CloudExplorer Lite permission bypass vulnerability

HIGH 81

CloudExplorer Lite is an open source, lightweight cloud management platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00735 Published 2023-10-30 Fixed in 1.4.1 CWE-287

TI-2023-20651 CVE-2023-39519

CloudExplorer Lite sensitive information leakage vulnerability

HIGH 74

Cloud Explorer Lite is an open source cloud management platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00754 Published 2023-08-24 Fixed in 1.4.0 CWE-200

TI-2023-22509 CVE-2023-42147 · GHSA-fv38-2xxm-x52m

An issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the login key component.

HIGH 72

An issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the login key component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00431 Published 2023-09-20 No fix listed CWE-319

TI-2023-02666 CVE-2023-2845 · GHSA-pv8h-p384-hhr9

Improper Access Control in cloudexplorer-dev/cloudexplorer-lite

HIGH 70

Improper Access Control in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00657 Published 2023-05-23 Fixed in v1.1.0 CWE-284

TI-2023-27633 CVE-2023-50612 · GHSA-r5hf-7r8j-j5mf

Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow…

HIGH 69

Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local attackers to escalate privileges and obtain sensitive information via the cloud accounts parameter.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00256 Published 2024-01-06 No fix listed CWE-276

TI-2023-02665 CVE-2023-2844 · GHSA-32r7-p8r7-9vwj

Authorization Bypass Through User-Controlled Key in cloudexplorer-dev/cloudexplorer-lite

MEDIUM 58

Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00676 Published 2023-05-23 Fixed in v1.1.0 CWE-639

TI-2023-17076 CVE-2023-34240

Weak passwords allowed in cloudexplorer-lite

MEDIUM 48

Cloudexplorer-lite is an open source cloud software stack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00463 Published 2023-06-27 Fixed in 1.2.0 CWE-521

TI-2023-03199 CVE-2023-3423 · GHSA-7f69-j3pp-qvxc

Weak Password Requirements in cloudexplorer-dev/cloudexplorer-lite

LOW 39

Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1.2.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0078 Published 2023-06-27 Fixed in v 1.2.0 CWE-521

Open these records in search →