Where
-Infinity
0

Trending

Last week
Last month
Last year

FIT2CLOUD JumpserverJumpServer has a Kubernetes Token Leak Vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2025-27095

FIT2CLOUD JumpserverArbitrary File Read in Ansible Playbooks in Jumpserver

Risk 87
Severity
10
First published (updated )
CVE-2024-40628

FIT2CLOUD JumpserverArbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver

Risk 87
Severity
10
First published (updated )
CVE-2024-40629

FIT2CLOUD JumpserverJumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery

Risk 59
Severity
10
EPSS
0.04%
First published (updated )
CVE-2024-29202

FIT2CLOUD JumpserverJumpServer's insecure Ansible playbook validation leads to RCE in Celery

Risk 59
Severity
10
EPSS
0.04%
First published (updated )
CVE-2024-29201
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FIT2CLOUD JumpserverJumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leaked

Risk 23
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2024-29020

FIT2CLOUD JumpserverJumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality

Risk 23
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2024-29024

FIT2CLOUD JumpserverJumpServer default admin user email leak password reset

Risk 27
Severity
5.3
First published (updated )
CVE-2023-46138

FIT2CLOUD Jumpserverjumpserver is vulnerable to password brute-force protection bypass via arbitrary IP values

Risk 27
Severity
5.3
First published (updated )
CVE-2023-46123

FIT2CLOUD JumpserverSSH public key login without private key challenge if mfa is enabled in jumpserver

Risk 86
Severity
9.8
First published (updated )
CVE-2023-42818
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/github.com/jumpserver/kokoRemote code execution on the host system via MongoDB shell in jumpserver

Risk 84
Severity
9.9
First published (updated )
CVE-2023-43651

FIT2CLOUD JumpserverNon-MFA account takeover via brute-force attack on weak password reset code in jumpserver

Risk 54
Severity
8.2
First published (updated )
CVE-2023-43650

FIT2CLOUD JumpserverNon-MFA account takeover via using only SSH public key to login in jumpserver

Risk 66
Severity
9.1
First published (updated )
CVE-2023-43652

FIT2CLOUD JumpserverPath traversal in Jumpserver

Risk 70
Severity
8.9
First published (updated )
CVE-2023-42819

FIT2CLOUD JumpserverRandom seed leakage in Jumpserver

Risk 54
Severity
8.2
First published (updated )
CVE-2023-42820
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FIT2CLOUD JumpserverJumpServer session replays download without authentication

Risk 54
Severity
8.2
First published (updated )
CVE-2023-42442

FIT2CLOUD JumpserverJumpServer Koko vulnerable to Command Injection for Kubernetes Connection

Risk 82
Severity
9.9
First published (updated )
CVE-2023-28110

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203