CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373). |
| 01/08/2019 |
| CVE-2018-20918 | 中危6.1 | cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372). | 01/08/2019 |
| CVE-2018-20917 | 中危5.5 | cPanel before 70.0.23 allows any user to disable Solr (SEC-371). | 01/08/2019 |
| CVE-2018-20916 | 中危5.4 | cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370). | 01/08/2019 |
| CVE-2018-20915 | 中危5.4 | cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369). | 01/08/2019 |
| CVE-2018-20914 | 高危7.3 | In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368). | 01/08/2019 |
| CVE-2018-20913 | 中危4.9 | cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364). | 01/08/2019 |
| CVE-2018-20912 | 中危6.3 | cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362). | 01/08/2019 |
| CVE-2018-20911 | 高危7.2 | cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup (SEC-359). | 01/08/2019 |
| CVE-2018-20910 | 中危6.1 | cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357). | 01/08/2019 |
| CVE-2018-20909 | 高危7.1 | cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338). | 01/08/2019 |
| CVE-2018-20908 | 中危5.5 | cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435). | 01/08/2019 |
| CVE-2018-20907 | 中危4.3 | cPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432). | 01/08/2019 |
| CVE-2018-20906 | 中危4.3 | cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430). | 01/08/2019 |
| CVE-2018-20905 | 中危5.4 | cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429). | 01/08/2019 |
| CVE-2018-20904 | 中危4.3 | cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction (SEC-427). | 01/08/2019 |