CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2018-20891 |
| MOYENNE5.5 |
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration (SEC-436). |
| 01/08/2019 |
| CVE-2018-20890 | MOYENNE4.3 | cPanel before 74.0.0 allows arbitrary zone file modifications during record edits (SEC-426). | 01/08/2019 |
| CVE-2018-20889 | MOYENNE4.4 | cPanel before 74.0.0 allows certain file-read operations via password file caching (SEC-425). | 01/08/2019 |
| CVE-2018-20888 | MOYENNE5.5 | cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication (SEC-424). | 01/08/2019 |
| CVE-2018-20887 | CRITIQUE9.8 | cPanel before 74.0.0 allows SQL injection during database backups (SEC-420). | 01/08/2019 |
| CVE-2018-20886 | MOYENNE5.3 | cPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418). | 01/08/2019 |
| CVE-2018-20885 | MOYENNE5.3 | cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416). | 01/08/2019 |
| CVE-2018-20884 | MOYENNE5.4 | cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367). | 01/08/2019 |
| CVE-2018-20883 | MOYENNE6.5 | cPanel before 74.0.8 allows FTP access during account suspension (SEC-449). | 01/08/2019 |
| CVE-2018-20882 | MOYENNE6.8 | cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447). | 01/08/2019 |
| CVE-2018-20881 | MOYENNE5.4 | cPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446). | 01/08/2019 |
| CVE-2018-20880 | FAIBLE3.3 | cPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file (SEC-445). | 01/08/2019 |
| CVE-2018-20879 | MOYENNE6.3 | cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API (SEC-444). | 01/08/2019 |
| CVE-2018-20878 | MOYENNE5.4 | cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface (SEC-441). | 01/08/2019 |
| CVE-2018-20877 | MOYENNE5.4 | cPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437). | 01/08/2019 |
| CVE-2018-20876 | MOYENNE5.4 | cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434). | 01/08/2019 |