CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2020-10117 |
| CRITIQUE9.1 |
cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542). |
| 17/03/2020 |
| CVE-2020-10116 | MOYENNE5.3 | cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541). | 17/03/2020 |
| CVE-2020-10115 | ÉLEVÉE7.2 | cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. (SEC-537). | 17/03/2020 |
| CVE-2020-10114 | MOYENNE6.1 | cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535). | 17/03/2020 |
| CVE-2020-10113 | MOYENNE6.1 | cPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515). | 17/03/2020 |
| CVE-2019-20498 | CRITIQUE9.8 | cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect (SEC-534). | 17/03/2020 |
| CVE-2019-20497 | MOYENNE5.4 | cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration (SEC-533). | 17/03/2020 |
| CVE-2019-20496 | MOYENNE5.5 | cPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log processing (SEC-532). | 17/03/2020 |
| CVE-2019-20495 | MOYENNE6.5 | cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming (SEC-531). | 17/03/2020 |
| CVE-2019-20494 | FAIBLE3.3 | In cPanel before 82.0.18, Cpanel::Rand::Get can produce a predictable series of numbers (SEC-525). | 17/03/2020 |
| CVE-2019-20493 | MOYENNE6.1 | cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520). | 17/03/2020 |
| CVE-2019-20492 | ÉLEVÉE8.8 | cPanel before 82.0.18 allows authentication bypass because of misparsing of the format of the password file (SEC-516). | 17/03/2020 |
| CVE-2019-20490 | ÉLEVÉE8.8 | cPanel before 82.0.18 allows authentication bypass because webmail usernames are processed inconsistently (SEC-499). | 17/03/2020 |
| CVE-2019-20491 | MOYENNE5.4 | cPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account suspensions (SEC-508). | 16/03/2020 |
| CVE-2012-6449 | MOYENNE5.4 | The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability. | 10/02/2020 |
| CVE-2012-6448 | MOYENNE6.1 | Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 27/01/2020 |