CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets (SEC-476). |
| 30/07/2019 |
| CVE-2019-14412 | LOW3.3 | Maketext in cPanel before 78.0.2 allows format-string injection in the DCV check_domains_via_dns UAPI (SEC-474). | 30/07/2019 |
| CVE-2019-14411 | MEDIUM5.3 | cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI (SEC-473). | 30/07/2019 |
| CVE-2019-14410 | LOW3.3 | Maketext in cPanel before 78.0.2 allows format-string injection in the Email store_filter UAPI (SEC-472). | 30/07/2019 |
| CVE-2019-14409 | MEDIUM5.5 | cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin (SEC-466). | 30/07/2019 |
| CVE-2019-14408 | MEDIUM4.3 | cPanel before 78.0.2 allows a demo account to link with an OpenID provider (SEC-460). | 30/07/2019 |
| CVE-2019-14407 | LOW2.7 | cPanel before 78.0.2 reveals internal data to OpenID providers (SEC-415). | 30/07/2019 |
| CVE-2019-14406 | MEDIUM6.1 | cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing (SEC-493). | 30/07/2019 |
| CVE-2019-14405 | HIGH8.8 | cPanel before 78.0.18 allows demo accounts to execute code via securitypolicy.cg (SEC-487). | 30/07/2019 |
| CVE-2019-14404 | MEDIUM5.5 | cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtual_user_spam router (SEC-484). | 30/07/2019 |
| CVE-2019-14403 | MEDIUM4.3 | cPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing (SEC-483). | 30/07/2019 |
| CVE-2019-14402 | LOW3.3 | cPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp (SEC-481). | 30/07/2019 |
| CVE-2019-14401 | HIGH8.8 | cPanel before 78.0.18 allows code execution via an addforward API1 call (SEC-480). | 30/07/2019 |
| CVE-2019-14400 | HIGH7.8 | cPanel before 78.0.18 allows local users to escalate to root access because of userdata cache misparsing (SEC-479). | 30/07/2019 |
| CVE-2019-14399 | HIGH7.1 | The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account (SEC-477). | 30/07/2019 |
| CVE-2019-14398 | HIGH8.8 | cPanel before 80.0.5 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-498). | 30/07/2019 |