CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface (SEC-521). |
| 09/10/2019 |
| CVE-2019-17375 | 높음8.8 | cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517). | 09/10/2019 |
| CVE-2016-10812 | 높음8.8 | In cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs (SEC-117). | 07/08/2019 |
| CVE-2016-10811 | 높음8.8 | In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs (SEC-116). | 07/08/2019 |
| CVE-2016-10810 | 높음8.8 | In cPanel before 57.9999.54, /scripts/maildir_converter exposed a TTY to an unprivileged process (SEC-115). | 07/08/2019 |
| CVE-2016-10809 | 높음8.8 | In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process (SEC-114). | 07/08/2019 |
| CVE-2016-10808 | 높음8.8 | In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs (SEC-113). | 07/08/2019 |
| CVE-2016-10807 | 보통6.5 | cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost (SEC-112). | 07/08/2019 |
| CVE-2016-10806 | 보통5.4 | cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page (SEC-110). | 07/08/2019 |
| CVE-2016-10805 | 높음8.8 | cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-109). | 07/08/2019 |
| CVE-2016-10804 | 높음8.1 | The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore (SEC-58). | 07/08/2019 |
| CVE-2016-10803 | 높음7.5 | cPanel before 57.9999.105 allows newline injection via LOC records (CPANEL-6923). | 07/08/2019 |
| CVE-2016-10802 | 높음8.8 | cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler (SEC-142). | 07/08/2019 |
| CVE-2016-10801 | 높음8.8 | cPanel before 58.0.4 has improper session handling for shared users (SEC-139). | 07/08/2019 |
| CVE-2016-10800 | 높음7.8 | cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138). | 07/08/2019 |
| CVE-2016-10799 | 보통5.5 | cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation (SEC-137). | 07/08/2019 |