CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통5.5 |
cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378). |
| 01/08/2019 |
| CVE-2016-10849 | 보통6.5 | cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82). | 01/08/2019 |
| CVE-2016-10848 | 높음7.2 | cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81). | 01/08/2019 |
| CVE-2016-10847 | 높음8.1 | cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80). | 01/08/2019 |
| CVE-2016-10846 | 높음8.1 | cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79). | 01/08/2019 |
| CVE-2016-10845 | 높음8.1 | cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78). | 01/08/2019 |
| CVE-2016-10844 | 보통6.5 | The chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77). | 01/08/2019 |
| CVE-2016-10843 | 높음8.1 | cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76). | 01/08/2019 |
| CVE-2016-10842 | 보통6.5 | cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74). | 01/08/2019 |
| CVE-2016-10841 | 보통5.3 | The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73). | 01/08/2019 |
| CVE-2016-10840 | 높음8.8 | cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72). | 01/08/2019 |
| CVE-2016-10839 | 높음8.1 | cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71). | 01/08/2019 |
| CVE-2016-10838 | 보통6.5 | cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script (SEC-70). | 01/08/2019 |
| CVE-2016-10837 | 높음7.5 | cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46). | 01/08/2019 |
| CVE-2016-10836 | 보통6.5 | cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav (SEC-108). | 01/08/2019 |
| CVE-2018-20923 | 보통6.1 | cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377). | 01/08/2019 |