CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 심각9.1 |
cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542). |
| 17/03/2020 |
| CVE-2020-10116 | 보통5.3 | cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541). | 17/03/2020 |
| CVE-2020-10115 | 높음7.2 | cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. (SEC-537). | 17/03/2020 |
| CVE-2020-10114 | 보통6.1 | cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535). | 17/03/2020 |
| CVE-2020-10113 | 보통6.1 | cPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515). | 17/03/2020 |
| CVE-2019-20498 | 심각9.8 | cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect (SEC-534). | 17/03/2020 |
| CVE-2019-20497 | 보통5.4 | cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration (SEC-533). | 17/03/2020 |
| CVE-2019-20496 | 보통5.5 | cPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log processing (SEC-532). | 17/03/2020 |
| CVE-2019-20495 | 보통6.5 | cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming (SEC-531). | 17/03/2020 |
| CVE-2019-20494 | 낮음3.3 | In cPanel before 82.0.18, Cpanel::Rand::Get can produce a predictable series of numbers (SEC-525). | 17/03/2020 |
| CVE-2019-20493 | 보통6.1 | cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520). | 17/03/2020 |
| CVE-2019-20492 | 높음8.8 | cPanel before 82.0.18 allows authentication bypass because of misparsing of the format of the password file (SEC-516). | 17/03/2020 |
| CVE-2019-20490 | 높음8.8 | cPanel before 82.0.18 allows authentication bypass because webmail usernames are processed inconsistently (SEC-499). | 17/03/2020 |
| CVE-2019-20491 | 보통5.4 | cPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account suspensions (SEC-508). | 16/03/2020 |
| CVE-2012-6449 | 보통5.4 | The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability. | 10/02/2020 |
| CVE-2019-17380 | 보통6.1 | cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface (SEC-528). | 09/10/2019 |