CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2017-18429 | FAIBLE3.3 | In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination (SEC-291). | 02/08/2019 |
| CVE-2017-18428 | FAIBLE2.5 | In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290). | 02/08/2019 |
| CVE-2017-18427 | FAIBLE3.3 | In cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289). | 02/08/2019 |
| CVE-2017-18426 | FAIBLE2.7 | cPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288). | 02/08/2019 |
| CVE-2017-18425 | FAIBLE2.5 | In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280). | 02/08/2019 |
| CVE-2017-18424 | FAIBLE3.3 | In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt (SEC-274). | 02/08/2019 |
| CVE-2017-18423 | FAIBLE3.3 | In cPanel before 66.0.2, domain log files become readable after log processing (SEC-273). | 02/08/2019 |
| CVE-2017-18422 | FAIBLE3.3 | In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions (SEC-272). | 02/08/2019 |
| CVE-2017-18421 | FAIBLE3.3 | cPanel before 66.0.2 allows demo accounts to create databases and users (SEC-271). | 02/08/2019 |
| CVE-2017-18420 | MOYENNE5.4 | cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269). | 02/08/2019 |
| CVE-2017-18419 | MOYENNE5.4 | cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266). | 02/08/2019 |
| CVE-2017-18418 | MOYENNE5.4 | cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265). | 02/08/2019 |
| CVE-2017-18417 | MOYENNE5.4 | cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263). | 02/08/2019 |
| CVE-2017-18416 | MOYENNE5.5 | cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update (SEC-303). | 02/08/2019 |
| CVE-2017-18415 | ÉLEVÉE7.8 | cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302). | 02/08/2019 |
| CVE-2017-18414 | ÉLEVÉE7.4 | cPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html (SEC-300). | 02/08/2019 |