CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65). |
| 01/08/2019 |
| CVE-2016-10858 | 严重9.8 | cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64). | 01/08/2019 |
| CVE-2016-10857 | 中危6.5 | cPanel before 11.54.0.0 allows a bypass of the e-mail sending limit (SEC-60). | 01/08/2019 |
| CVE-2016-10856 | 中危6.5 | cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds (SEC-29). | 01/08/2019 |
| CVE-2016-10855 | 严重9.8 | cPanel before 11.54.0.4 allows unauthenticated arbitrary code execution via cpsrvd (SEC-91). | 01/08/2019 |
| CVE-2016-10854 | 中危5.4 | cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface (SEC-87). | 01/08/2019 |
| CVE-2016-10853 | 中危5.4 | cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface (SEC-86). | 01/08/2019 |
| CVE-2016-10852 | 中危6.5 | cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85). | 01/08/2019 |
| CVE-2016-10851 | 中危5.4 | cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface (SEC-84). | 01/08/2019 |
| CVE-2016-10850 | 高危8.8 | cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC-83). | 01/08/2019 |
| CVE-2015-9291 | 高危7.5 | cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-1221). | 01/08/2019 |
| CVE-2018-20900 | 中危6.1 | cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399). | 01/08/2019 |
| CVE-2018-20899 | 中危6.1 | cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398). | 01/08/2019 |
| CVE-2018-20898 | 中危4.3 | cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396). | 01/08/2019 |
| CVE-2018-20897 | 低危2.8 | cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system (SEC-395). | 01/08/2019 |
| CVE-2018-20896 | 低危3.9 | cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface (SEC-394). | 01/08/2019 |