CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2017-18430 | 보통4.7 | In cPanel before 66.0.2, user and group ownership may be incorrectly set when using reassign_post_terminate_cruft (SEC-294). | 02/08/2019 |
| CVE-2017-18429 | 낮음3.3 | In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination (SEC-291). | 02/08/2019 |
| CVE-2017-18428 | 낮음2.5 | In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290). | 02/08/2019 |
| CVE-2017-18427 | 낮음3.3 | In cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289). | 02/08/2019 |
| CVE-2017-18426 | 낮음2.7 | cPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288). | 02/08/2019 |
| CVE-2017-18425 | 낮음2.5 | In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280). | 02/08/2019 |
| CVE-2017-18424 | 낮음3.3 | In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt (SEC-274). | 02/08/2019 |
| CVE-2017-18423 | 낮음3.3 | In cPanel before 66.0.2, domain log files become readable after log processing (SEC-273). | 02/08/2019 |
| CVE-2017-18422 | 낮음3.3 | In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions (SEC-272). | 02/08/2019 |
| CVE-2017-18421 | 낮음3.3 | cPanel before 66.0.2 allows demo accounts to create databases and users (SEC-271). | 02/08/2019 |
| CVE-2017-18420 | 보통5.4 | cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269). | 02/08/2019 |
| CVE-2017-18419 | 보통5.4 | cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266). | 02/08/2019 |
| CVE-2017-18418 | 보통5.4 | cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265). | 02/08/2019 |
| CVE-2017-18417 | 보통5.4 | cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263). | 02/08/2019 |
| CVE-2017-18416 | 보통5.5 | cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update (SEC-303). | 02/08/2019 |
| CVE-2017-18415 | 높음7.8 | cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302). | 02/08/2019 |