CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 02/08/2019 |
| CVE-2017-18409 | MOYENNE6.5 | In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases (SEC-283). | 02/08/2019 |
| CVE-2017-18408 | MOYENNE5.4 | cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282). | 02/08/2019 |
| CVE-2017-18407 | MOYENNE4.8 | cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download (SEC-279). | 02/08/2019 |
| CVE-2017-18406 | ÉLEVÉE7.5 | cPanel before 67.9999.103 allows SQL injection during eximstats processing (SEC-276). | 02/08/2019 |
| CVE-2017-18405 | MOYENNE5.5 | cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345). | 02/08/2019 |
| CVE-2017-18404 | FAIBLE3.1 | cPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD (SEC-341). | 02/08/2019 |
| CVE-2017-18403 | MOYENNE6.3 | cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives (SEC-337). | 02/08/2019 |
| CVE-2017-18402 | MOYENNE5.4 | cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade (SEC-336). | 02/08/2019 |
| CVE-2017-18401 | FAIBLE2.7 | cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats (SEC-334). | 02/08/2019 |
| CVE-2017-18400 | ÉLEVÉE7.8 | cPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333). | 02/08/2019 |
| CVE-2017-18399 | FAIBLE3.7 | cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer (SEC-332). | 02/08/2019 |
| CVE-2017-18398 | FAIBLE3.8 | DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331). | 02/08/2019 |
| CVE-2017-18397 | FAIBLE3.3 | cPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330). | 02/08/2019 |
| CVE-2017-18396 | MOYENNE5.5 | cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329). | 02/08/2019 |
| CVE-2017-18395 | FAIBLE2.7 | cPanel before 68.0.15 does not block a username of ssl (SEC-328). | 02/08/2019 |
| CVE-2017-18394 | FAIBLE2.7 | cPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327). | 02/08/2019 |