CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2017-18390 | 높음7.8 | cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups (SEC-322). | 02/08/2019 |
| CVE-2017-18389 | 보통6.3 | cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318). | 02/08/2019 |
| CVE-2017-18388 | 높음7.8 | cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315). | 02/08/2019 |
| CVE-2017-18387 | 높음7.2 | cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314). | 02/08/2019 |
| CVE-2017-18386 | 높음7.2 | cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313). | 02/08/2019 |
| CVE-2017-18385 | 보통5.5 | cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311). | 02/08/2019 |
| CVE-2017-18384 | 낮음3.8 | cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310). | 02/08/2019 |
| CVE-2017-18383 | 높음7.8 | cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309). | 02/08/2019 |
| CVE-2017-18382 | 낮음2.7 | cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306). | 02/08/2019 |
| CVE-2016-10826 | 높음8.8 | cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests (SEC-93). | 01/08/2019 |
| CVE-2016-10821 | 보통6.5 | In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list (SEC-75). | 01/08/2019 |
| CVE-2016-10820 | 높음8.8 | cPanel before 55.9999.141 allows daemons to access their controlling TTYs (SEC-31). | 01/08/2019 |
| CVE-2016-10819 | 보통6.5 | In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125). | 01/08/2019 |
| CVE-2016-10818 | 보통6.5 | cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup (SEC-124). | 01/08/2019 |
| CVE-2016-10817 | 심각9.8 | cPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file (SEC-123). | 01/08/2019 |
| CVE-2016-10816 | 높음8.8 | cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders (SEC-121). | 01/08/2019 |