CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372). |
| 01/08/2019 |
| CVE-2018-20917 | 보통5.5 | cPanel before 70.0.23 allows any user to disable Solr (SEC-371). | 01/08/2019 |
| CVE-2018-20916 | 보통5.4 | cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370). | 01/08/2019 |
| CVE-2018-20915 | 보통5.4 | cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369). | 01/08/2019 |
| CVE-2018-20914 | 높음7.3 | In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368). | 01/08/2019 |
| CVE-2018-20913 | 보통4.9 | cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364). | 01/08/2019 |
| CVE-2018-20912 | 보통6.3 | cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362). | 01/08/2019 |
| CVE-2018-20911 | 높음7.2 | cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup (SEC-359). | 01/08/2019 |
| CVE-2018-20910 | 보통6.1 | cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357). | 01/08/2019 |
| CVE-2018-20909 | 높음7.1 | cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338). | 01/08/2019 |
| CVE-2018-20908 | 보통5.5 | cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435). | 01/08/2019 |
| CVE-2018-20907 | 보통4.3 | cPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432). | 01/08/2019 |
| CVE-2018-20906 | 보통4.3 | cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430). | 01/08/2019 |
| CVE-2018-20905 | 보통5.4 | cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429). | 01/08/2019 |
| CVE-2018-20904 | 보통4.3 | cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction (SEC-427). | 01/08/2019 |
| CVE-2018-20903 | 보통6.1 | cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421). | 01/08/2019 |