CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 02/08/2019 |
| CVE-2017-18409 | 보통6.5 | In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases (SEC-283). | 02/08/2019 |
| CVE-2017-18408 | 보통5.4 | cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282). | 02/08/2019 |
| CVE-2017-18407 | 보통4.8 | cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download (SEC-279). | 02/08/2019 |
| CVE-2017-18406 | 높음7.5 | cPanel before 67.9999.103 allows SQL injection during eximstats processing (SEC-276). | 02/08/2019 |
| CVE-2017-18405 | 보통5.5 | cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345). | 02/08/2019 |
| CVE-2017-18404 | 낮음3.1 | cPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD (SEC-341). | 02/08/2019 |
| CVE-2017-18403 | 보통6.3 | cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives (SEC-337). | 02/08/2019 |
| CVE-2017-18402 | 보통5.4 | cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade (SEC-336). | 02/08/2019 |
| CVE-2017-18401 | 낮음2.7 | cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats (SEC-334). | 02/08/2019 |
| CVE-2017-18400 | 높음7.8 | cPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333). | 02/08/2019 |
| CVE-2017-18399 | 낮음3.7 | cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer (SEC-332). | 02/08/2019 |
| CVE-2017-18398 | 낮음3.8 | DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331). | 02/08/2019 |
| CVE-2017-18397 | 낮음3.3 | cPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330). | 02/08/2019 |
| CVE-2017-18396 | 보통5.5 | cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329). | 02/08/2019 |
| CVE-2017-18395 | 낮음2.7 | cPanel before 68.0.15 does not block a username of ssl (SEC-328). | 02/08/2019 |
| CVE-2017-18394 | 낮음2.7 | cPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327). | 02/08/2019 |