CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 25/09/2020 |
| CVE-2020-26109 | ALTO7.5 | cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification (SEC-557). | 25/09/2020 |
| CVE-2020-26108 | CRÍTICO9.8 | cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488). | 25/09/2020 |
| CVE-2020-26107 | ALTO7.5 | cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561). | 25/09/2020 |
| CVE-2020-26106 | ALTO7.5 | cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558). | 25/09/2020 |
| CVE-2020-26105 | CRÍTICO9.8 | In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554). | 25/09/2020 |
| CVE-2020-26104 | ALTO7.5 | In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM (SEC-552). | 25/09/2020 |
| CVE-2020-26103 | ALTO7.5 | In cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM (SEC-551). | 25/09/2020 |
| CVE-2020-26102 | ALTO7.5 | In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM (SEC-550). | 25/09/2020 |
| CVE-2020-26101 | CRÍTICO9.8 | In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549). | 25/09/2020 |
| CVE-2020-26100 | CRÍTICO9.8 | chsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497). | 25/09/2020 |
| CVE-2020-26099 | ALTO7.5 | cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism (SEC-491). | 25/09/2020 |
| CVE-2020-26098 | CRÍTICO9.8 | cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution (SEC-485). | 25/09/2020 |
| CVE-2020-12785 | ALTO8.1 | cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540). | 11/05/2020 |
| CVE-2020-12784 | MÉDIO5.3 | cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings (SEC-505). | 11/05/2020 |
| CVE-2020-10122 | MÉDIO6.5 | cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547). | 17/03/2020 |