CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 02/08/2019 |
| CVE-2017-18410 | 中危6.5 | In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server (SEC-284). | 02/08/2019 |
| CVE-2017-18409 | 中危6.5 | In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases (SEC-283). | 02/08/2019 |
| CVE-2017-18408 | 中危5.4 | cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282). | 02/08/2019 |
| CVE-2017-18407 | 中危4.8 | cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download (SEC-279). | 02/08/2019 |
| CVE-2017-18406 | 高危7.5 | cPanel before 67.9999.103 allows SQL injection during eximstats processing (SEC-276). | 02/08/2019 |
| CVE-2017-18405 | 中危5.5 | cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345). | 02/08/2019 |
| CVE-2017-18404 | 低危3.1 | cPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD (SEC-341). | 02/08/2019 |
| CVE-2017-18403 | 中危6.3 | cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives (SEC-337). | 02/08/2019 |
| CVE-2017-18402 | 中危5.4 | cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade (SEC-336). | 02/08/2019 |
| CVE-2017-18401 | 低危2.7 | cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats (SEC-334). | 02/08/2019 |
| CVE-2017-18400 | 高危7.8 | cPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333). | 02/08/2019 |
| CVE-2017-18399 | 低危3.7 | cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer (SEC-332). | 02/08/2019 |
| CVE-2017-18398 | 低危3.8 | DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331). | 02/08/2019 |
| CVE-2017-18397 | 低危3.3 | cPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330). | 02/08/2019 |
| CVE-2017-18396 | 中危5.5 | cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329). | 02/08/2019 |
| CVE-2017-18395 | 低危2.7 | cPanel before 68.0.15 does not block a username of ssl (SEC-328). | 02/08/2019 |