CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379). |
| 01/08/2019 |
| CVE-2018-20924 | 中危5.5 | cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378). | 01/08/2019 |
| CVE-2016-10849 | 中危6.5 | cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82). | 01/08/2019 |
| CVE-2016-10848 | 高危7.2 | cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81). | 01/08/2019 |
| CVE-2016-10847 | 高危8.1 | cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80). | 01/08/2019 |
| CVE-2016-10846 | 高危8.1 | cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79). | 01/08/2019 |
| CVE-2016-10845 | 高危8.1 | cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78). | 01/08/2019 |
| CVE-2016-10844 | 中危6.5 | The chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77). | 01/08/2019 |
| CVE-2016-10843 | 高危8.1 | cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76). | 01/08/2019 |
| CVE-2016-10842 | 中危6.5 | cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74). | 01/08/2019 |
| CVE-2016-10841 | 中危5.3 | The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73). | 01/08/2019 |
| CVE-2016-10840 | 高危8.8 | cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72). | 01/08/2019 |
| CVE-2016-10839 | 高危8.1 | cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71). | 01/08/2019 |
| CVE-2016-10838 | 中危6.5 | cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script (SEC-70). | 01/08/2019 |
| CVE-2016-10837 | 高危7.5 | cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46). | 01/08/2019 |
| CVE-2016-10836 | 中危6.5 | cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav (SEC-108). | 01/08/2019 |