CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64). |
| 01/08/2019 |
| CVE-2016-10857 | 보통6.5 | cPanel before 11.54.0.0 allows a bypass of the e-mail sending limit (SEC-60). | 01/08/2019 |
| CVE-2016-10856 | 보통6.5 | cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds (SEC-29). | 01/08/2019 |
| CVE-2016-10855 | 심각9.8 | cPanel before 11.54.0.4 allows unauthenticated arbitrary code execution via cpsrvd (SEC-91). | 01/08/2019 |
| CVE-2016-10854 | 보통5.4 | cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface (SEC-87). | 01/08/2019 |
| CVE-2016-10853 | 보통5.4 | cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface (SEC-86). | 01/08/2019 |
| CVE-2016-10852 | 보통6.5 | cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85). | 01/08/2019 |
| CVE-2016-10851 | 보통5.4 | cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface (SEC-84). | 01/08/2019 |
| CVE-2016-10850 | 높음8.8 | cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC-83). | 01/08/2019 |
| CVE-2015-9291 | 높음7.5 | cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-1221). | 01/08/2019 |
| CVE-2018-20900 | 보통6.1 | cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399). | 01/08/2019 |
| CVE-2018-20899 | 보통6.1 | cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398). | 01/08/2019 |
| CVE-2018-20898 | 보통4.3 | cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396). | 01/08/2019 |
| CVE-2018-20897 | 낮음2.8 | cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system (SEC-395). | 01/08/2019 |
| CVE-2018-20896 | 낮음3.9 | cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface (SEC-394). | 01/08/2019 |
| CVE-2018-20895 | 높음7.2 | In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts (SEC-393). | 01/08/2019 |