CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 02/08/2019 |
| CVE-2017-18389 | MOYENNE6.3 | cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318). | 02/08/2019 |
| CVE-2017-18388 | ÉLEVÉE7.8 | cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315). | 02/08/2019 |
| CVE-2017-18387 | ÉLEVÉE7.2 | cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314). | 02/08/2019 |
| CVE-2017-18386 | ÉLEVÉE7.2 | cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313). | 02/08/2019 |
| CVE-2017-18385 | MOYENNE5.5 | cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311). | 02/08/2019 |
| CVE-2017-18384 | FAIBLE3.8 | cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310). | 02/08/2019 |
| CVE-2017-18383 | ÉLEVÉE7.8 | cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309). | 02/08/2019 |
| CVE-2017-18382 | FAIBLE2.7 | cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306). | 02/08/2019 |
| CVE-2016-10826 | ÉLEVÉE8.8 | cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests (SEC-93). | 01/08/2019 |
| CVE-2016-10821 | MOYENNE6.5 | In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list (SEC-75). | 01/08/2019 |
| CVE-2016-10820 | ÉLEVÉE8.8 | cPanel before 55.9999.141 allows daemons to access their controlling TTYs (SEC-31). | 01/08/2019 |
| CVE-2016-10819 | MOYENNE6.5 | In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125). | 01/08/2019 |
| CVE-2016-10818 | MOYENNE6.5 | cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup (SEC-124). | 01/08/2019 |
| CVE-2016-10817 | CRITIQUE9.8 | cPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file (SEC-123). | 01/08/2019 |
| CVE-2016-10816 | ÉLEVÉE8.8 | cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders (SEC-121). | 01/08/2019 |
| CVE-2016-10815 | MOYENNE6.5 | cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs (SEC-120). | 01/08/2019 |