CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets (SEC-476). |
| 30/07/2019 |
| CVE-2019-14412 | 낮음3.3 | Maketext in cPanel before 78.0.2 allows format-string injection in the DCV check_domains_via_dns UAPI (SEC-474). | 30/07/2019 |
| CVE-2019-14411 | 보통5.3 | cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI (SEC-473). | 30/07/2019 |
| CVE-2019-14410 | 낮음3.3 | Maketext in cPanel before 78.0.2 allows format-string injection in the Email store_filter UAPI (SEC-472). | 30/07/2019 |
| CVE-2019-14409 | 보통5.5 | cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin (SEC-466). | 30/07/2019 |
| CVE-2019-14408 | 보통4.3 | cPanel before 78.0.2 allows a demo account to link with an OpenID provider (SEC-460). | 30/07/2019 |
| CVE-2019-14407 | 낮음2.7 | cPanel before 78.0.2 reveals internal data to OpenID providers (SEC-415). | 30/07/2019 |
| CVE-2019-14406 | 보통6.1 | cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing (SEC-493). | 30/07/2019 |
| CVE-2019-14405 | 높음8.8 | cPanel before 78.0.18 allows demo accounts to execute code via securitypolicy.cg (SEC-487). | 30/07/2019 |
| CVE-2019-14404 | 보통5.5 | cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtual_user_spam router (SEC-484). | 30/07/2019 |
| CVE-2019-14403 | 보통4.3 | cPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing (SEC-483). | 30/07/2019 |
| CVE-2019-14402 | 낮음3.3 | cPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp (SEC-481). | 30/07/2019 |
| CVE-2019-14401 | 높음8.8 | cPanel before 78.0.18 allows code execution via an addforward API1 call (SEC-480). | 30/07/2019 |
| CVE-2019-14400 | 높음7.8 | cPanel before 78.0.18 allows local users to escalate to root access because of userdata cache misparsing (SEC-479). | 30/07/2019 |
| CVE-2019-14399 | 높음7.1 | The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account (SEC-477). | 30/07/2019 |
| CVE-2019-14398 | 높음8.8 | cPanel before 80.0.5 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-498). | 30/07/2019 |