CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface (SEC-521). |
| 09/10/2019 |
| CVE-2019-17375 | HOCH8.8 | cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517). | 09/10/2019 |
| CVE-2016-10812 | HOCH8.8 | In cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs (SEC-117). | 07/08/2019 |
| CVE-2016-10811 | HOCH8.8 | In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs (SEC-116). | 07/08/2019 |
| CVE-2016-10810 | HOCH8.8 | In cPanel before 57.9999.54, /scripts/maildir_converter exposed a TTY to an unprivileged process (SEC-115). | 07/08/2019 |
| CVE-2016-10809 | HOCH8.8 | In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process (SEC-114). | 07/08/2019 |
| CVE-2016-10808 | HOCH8.8 | In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs (SEC-113). | 07/08/2019 |
| CVE-2016-10807 | MITTEL6.5 | cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost (SEC-112). | 07/08/2019 |
| CVE-2016-10806 | MITTEL5.4 | cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page (SEC-110). | 07/08/2019 |
| CVE-2016-10805 | HOCH8.8 | cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-109). | 07/08/2019 |
| CVE-2016-10804 | HOCH8.1 | The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore (SEC-58). | 07/08/2019 |
| CVE-2016-10803 | HOCH7.5 | cPanel before 57.9999.105 allows newline injection via LOC records (CPANEL-6923). | 07/08/2019 |
| CVE-2016-10802 | HOCH8.8 | cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler (SEC-142). | 07/08/2019 |
| CVE-2016-10801 | HOCH8.8 | cPanel before 58.0.4 has improper session handling for shared users (SEC-139). | 07/08/2019 |
| CVE-2016-10800 | HOCH7.8 | cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138). | 07/08/2019 |
| CVE-2016-10799 | MITTEL5.5 | cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation (SEC-137). | 07/08/2019 |