CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| MEDIUM4.5 |
cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convert_roundcube_mysql2sqlite (SEC-255). |
| 02/08/2019 |
| CVE-2017-18449 | MEDIUM5.5 | cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254). | 02/08/2019 |
| CVE-2017-18448 | MEDIUM5.3 | cPanel before 64.0.21 allows certain file-read operations via a Serverinfo_manpage API call (SEC-252). | 02/08/2019 |
| CVE-2017-18447 | MEDIUM6.3 | cPanel before 64.0.21 allows demo accounts to execute code via the ClamScanner_getsocket API (SEC-251). | 02/08/2019 |
| CVE-2017-18446 | MEDIUM6.3 | cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250). | 02/08/2019 |
| CVE-2017-18445 | MEDIUM4.3 | cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249). | 02/08/2019 |
| CVE-2017-18444 | MEDIUM5.3 | cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248). | 02/08/2019 |
| CVE-2017-18443 | MEDIUM5.8 | cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247). | 02/08/2019 |
| CVE-2017-18442 | MEDIUM5.3 | cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246). | 02/08/2019 |
| CVE-2017-18441 | MEDIUM5.0 | cPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245). | 02/08/2019 |
| CVE-2017-18440 | MEDIUM4.3 | cPanel before 64.0.21 allows demo users to execute traceroute via api2 (SEC-244). | 02/08/2019 |
| CVE-2017-18439 | MEDIUM6.3 | cPanel before 64.0.21 allows demo accounts to execute code via an ImageManager_dimensions API call (SEC-243). | 02/08/2019 |
| CVE-2017-18438 | MEDIUM6.3 | cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls (SEC-242). | 02/08/2019 |
| CVE-2017-18437 | MEDIUM4.4 | cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240). | 02/08/2019 |
| CVE-2017-18436 | LOW3.5 | cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call (SEC-239). | 02/08/2019 |
| CVE-2017-18435 | HIGH7.3 | cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API (SEC-238). | 02/08/2019 |