CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| MEDIUM6.5 |
cPanel before 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC-161). |
| 05/08/2019 |
| CVE-2016-10767 | MEDIUM5.4 | cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159). | 05/08/2019 |
| CVE-2017-18468 | MEDIUM6.3 | cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API (SEC-232). | 05/08/2019 |
| CVE-2017-18467 | MEDIUM4.3 | cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229). | 05/08/2019 |
| CVE-2017-18466 | LOW2.7 | cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration (SEC-228). | 05/08/2019 |
| CVE-2017-18465 | MEDIUM4.4 | cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227). | 05/08/2019 |
| CVE-2017-18464 | MEDIUM4.9 | cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226). | 05/08/2019 |
| CVE-2017-18462 | HIGH7.5 | cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-224). | 05/08/2019 |
| CVE-2017-18463 | HIGH7.8 | cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path (SEC-225). | 02/08/2019 |
| CVE-2017-18461 | MEDIUM4.3 | cPanel before 62.0.17 allows does not preserve security policy questions across an account rename (SEC-223). | 02/08/2019 |
| CVE-2017-18460 | HIGH7.8 | cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221). | 02/08/2019 |
| CVE-2017-18459 | HIGH7.8 | cPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220). | 02/08/2019 |
| CVE-2017-18458 | LOW3.3 | cPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219). | 02/08/2019 |
| CVE-2017-18457 | MEDIUM4.4 | cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218). | 02/08/2019 |
| CVE-2017-18456 | MEDIUM6.1 | cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217). | 02/08/2019 |
| CVE-2017-18455 | LOW2.7 | In cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208). | 02/08/2019 |