CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| ÉLEVÉE8.1 |
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65). |
| 01/08/2019 |
| CVE-2016-10858 | CRITIQUE9.8 | cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64). | 01/08/2019 |
| CVE-2016-10857 | MOYENNE6.5 | cPanel before 11.54.0.0 allows a bypass of the e-mail sending limit (SEC-60). | 01/08/2019 |
| CVE-2016-10856 | MOYENNE6.5 | cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds (SEC-29). | 01/08/2019 |
| CVE-2016-10855 | CRITIQUE9.8 | cPanel before 11.54.0.4 allows unauthenticated arbitrary code execution via cpsrvd (SEC-91). | 01/08/2019 |
| CVE-2016-10854 | MOYENNE5.4 | cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface (SEC-87). | 01/08/2019 |
| CVE-2016-10853 | MOYENNE5.4 | cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface (SEC-86). | 01/08/2019 |
| CVE-2016-10852 | MOYENNE6.5 | cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85). | 01/08/2019 |
| CVE-2016-10851 | MOYENNE5.4 | cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface (SEC-84). | 01/08/2019 |
| CVE-2016-10850 | ÉLEVÉE8.8 | cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC-83). | 01/08/2019 |
| CVE-2015-9291 | ÉLEVÉE7.5 | cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-1221). | 01/08/2019 |
| CVE-2018-20900 | MOYENNE6.1 | cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399). | 01/08/2019 |
| CVE-2018-20899 | MOYENNE6.1 | cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398). | 01/08/2019 |
| CVE-2018-20898 | MOYENNE4.3 | cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396). | 01/08/2019 |
| CVE-2018-20897 | FAIBLE2.8 | cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system (SEC-395). | 01/08/2019 |
| CVE-2018-20896 | FAIBLE3.9 | cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface (SEC-394). | 01/08/2019 |