CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373). |
| 01/08/2019 |
| CVE-2018-20918 | MÉDIO6.1 | cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372). | 01/08/2019 |
| CVE-2018-20917 | MÉDIO5.5 | cPanel before 70.0.23 allows any user to disable Solr (SEC-371). | 01/08/2019 |
| CVE-2018-20916 | MÉDIO5.4 | cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370). | 01/08/2019 |
| CVE-2018-20915 | MÉDIO5.4 | cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369). | 01/08/2019 |
| CVE-2018-20914 | ALTO7.3 | In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368). | 01/08/2019 |
| CVE-2018-20913 | MÉDIO4.9 | cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364). | 01/08/2019 |
| CVE-2018-20912 | MÉDIO6.3 | cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362). | 01/08/2019 |
| CVE-2018-20911 | ALTO7.2 | cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup (SEC-359). | 01/08/2019 |
| CVE-2018-20910 | MÉDIO6.1 | cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357). | 01/08/2019 |
| CVE-2018-20909 | ALTO7.1 | cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338). | 01/08/2019 |
| CVE-2018-20908 | MÉDIO5.5 | cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435). | 01/08/2019 |
| CVE-2018-20907 | MÉDIO4.3 | cPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432). | 01/08/2019 |
| CVE-2018-20906 | MÉDIO4.3 | cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430). | 01/08/2019 |
| CVE-2018-20905 | MÉDIO5.4 | cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429). | 01/08/2019 |
| CVE-2018-20904 | MÉDIO4.3 | cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction (SEC-427). | 01/08/2019 |