CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2017-18390 | 高危7.8 | cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups (SEC-322). | 02/08/2019 |
| CVE-2017-18389 | 中危6.3 | cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318). | 02/08/2019 |
| CVE-2017-18388 | 高危7.8 | cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315). | 02/08/2019 |
| CVE-2017-18387 | 高危7.2 | cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314). | 02/08/2019 |
| CVE-2017-18386 | 高危7.2 | cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313). | 02/08/2019 |
| CVE-2017-18385 | 中危5.5 | cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311). | 02/08/2019 |
| CVE-2017-18384 | 低危3.8 | cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310). | 02/08/2019 |
| CVE-2017-18383 | 高危7.8 | cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309). | 02/08/2019 |
| CVE-2017-18382 | 低危2.7 | cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306). | 02/08/2019 |
| CVE-2016-10826 | 高危8.8 | cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests (SEC-93). | 01/08/2019 |
| CVE-2016-10821 | 中危6.5 | In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list (SEC-75). | 01/08/2019 |
| CVE-2016-10820 | 高危8.8 | cPanel before 55.9999.141 allows daemons to access their controlling TTYs (SEC-31). | 01/08/2019 |
| CVE-2016-10819 | 中危6.5 | In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125). | 01/08/2019 |
| CVE-2016-10818 | 中危6.5 | cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup (SEC-124). | 01/08/2019 |
| CVE-2016-10817 | 严重9.8 | cPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file (SEC-123). | 01/08/2019 |
| CVE-2016-10816 | 高危8.8 | cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders (SEC-121). | 01/08/2019 |