CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account (SEC-101). |
| 01/08/2019 |
| CVE-2016-10830 | 높음8.1 | cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100). | 01/08/2019 |
| CVE-2016-10829 | 보통6.5 | cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99). | 01/08/2019 |
| CVE-2016-10828 | 높음8.8 | cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97). | 01/08/2019 |
| CVE-2016-10827 | 보통5.4 | cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96). | 01/08/2019 |
| CVE-2016-10825 | 높음8.1 | cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92). | 01/08/2019 |
| CVE-2016-10824 | 심각9.8 | cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90). | 01/08/2019 |
| CVE-2016-10823 | 높음8.8 | cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89). | 01/08/2019 |
| CVE-2016-10822 | 보통5.4 | cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88). | 01/08/2019 |
| CVE-2018-20935 | 보통5.4 | cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412). | 01/08/2019 |
| CVE-2018-20934 | 보통6.5 | cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411). | 01/08/2019 |
| CVE-2018-20933 | 보통5.4 | cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410). | 01/08/2019 |
| CVE-2018-20932 | 낮음2.7 | cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406). | 01/08/2019 |
| CVE-2018-20931 | 보통6.3 | cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405). | 01/08/2019 |
| CVE-2018-20930 | 보통6.5 | cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401). | 01/08/2019 |
| CVE-2018-20929 | 보통6.1 | cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392). | 01/08/2019 |