CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통6.5 |
cPanel before 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC-161). |
| 05/08/2019 |
| CVE-2016-10767 | 보통5.4 | cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159). | 05/08/2019 |
| CVE-2017-18468 | 보통6.3 | cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API (SEC-232). | 05/08/2019 |
| CVE-2017-18467 | 보통4.3 | cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229). | 05/08/2019 |
| CVE-2017-18466 | 낮음2.7 | cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration (SEC-228). | 05/08/2019 |
| CVE-2017-18465 | 보통4.4 | cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227). | 05/08/2019 |
| CVE-2017-18464 | 보통4.9 | cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226). | 05/08/2019 |
| CVE-2017-18462 | 높음7.5 | cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-224). | 05/08/2019 |
| CVE-2017-18463 | 높음7.8 | cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path (SEC-225). | 02/08/2019 |
| CVE-2017-18461 | 보통4.3 | cPanel before 62.0.17 allows does not preserve security policy questions across an account rename (SEC-223). | 02/08/2019 |
| CVE-2017-18460 | 높음7.8 | cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221). | 02/08/2019 |
| CVE-2017-18459 | 높음7.8 | cPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220). | 02/08/2019 |
| CVE-2017-18458 | 낮음3.3 | cPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219). | 02/08/2019 |
| CVE-2017-18457 | 보통4.4 | cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218). | 02/08/2019 |
| CVE-2017-18456 | 보통6.1 | cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217). | 02/08/2019 |
| CVE-2017-18455 | 낮음2.7 | In cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208). | 02/08/2019 |