CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| MEDIUM5.5 |
cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378). |
| 01/08/2019 |
| CVE-2016-10849 | MEDIUM6.5 | cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82). | 01/08/2019 |
| CVE-2016-10848 | HIGH7.2 | cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81). | 01/08/2019 |
| CVE-2016-10847 | HIGH8.1 | cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80). | 01/08/2019 |
| CVE-2016-10846 | HIGH8.1 | cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79). | 01/08/2019 |
| CVE-2016-10845 | HIGH8.1 | cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78). | 01/08/2019 |
| CVE-2016-10844 | MEDIUM6.5 | The chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77). | 01/08/2019 |
| CVE-2016-10843 | HIGH8.1 | cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76). | 01/08/2019 |
| CVE-2016-10842 | MEDIUM6.5 | cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74). | 01/08/2019 |
| CVE-2016-10841 | MEDIUM5.3 | The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73). | 01/08/2019 |
| CVE-2016-10840 | HIGH8.8 | cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72). | 01/08/2019 |
| CVE-2016-10839 | HIGH8.1 | cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71). | 01/08/2019 |
| CVE-2016-10838 | MEDIUM6.5 | cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script (SEC-70). | 01/08/2019 |
| CVE-2016-10837 | HIGH7.5 | cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46). | 01/08/2019 |
| CVE-2016-10836 | MEDIUM6.5 | cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav (SEC-108). | 01/08/2019 |
| CVE-2018-20923 | MEDIUM6.1 | cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377). | 01/08/2019 |