CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 25/09/2020 |
| CVE-2020-26109 | 높음7.5 | cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification (SEC-557). | 25/09/2020 |
| CVE-2020-26108 | 심각9.8 | cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488). | 25/09/2020 |
| CVE-2020-26107 | 높음7.5 | cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561). | 25/09/2020 |
| CVE-2020-26106 | 높음7.5 | cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558). | 25/09/2020 |
| CVE-2020-26105 | 심각9.8 | In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554). | 25/09/2020 |
| CVE-2020-26104 | 높음7.5 | In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM (SEC-552). | 25/09/2020 |
| CVE-2020-26103 | 높음7.5 | In cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM (SEC-551). | 25/09/2020 |
| CVE-2020-26102 | 높음7.5 | In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM (SEC-550). | 25/09/2020 |
| CVE-2020-26101 | 심각9.8 | In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549). | 25/09/2020 |
| CVE-2020-26100 | 심각9.8 | chsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497). | 25/09/2020 |
| CVE-2020-26099 | 높음7.5 | cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism (SEC-491). | 25/09/2020 |
| CVE-2020-26098 | 심각9.8 | cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution (SEC-485). | 25/09/2020 |
| CVE-2020-12785 | 높음8.1 | cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540). | 11/05/2020 |
| CVE-2020-12784 | 보통5.3 | cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings (SEC-505). | 11/05/2020 |
| CVE-2020-10122 | 보통6.5 | cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547). | 17/03/2020 |