CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危5.5 |
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration (SEC-436). |
| 01/08/2019 |
| CVE-2018-20890 | 中危4.3 | cPanel before 74.0.0 allows arbitrary zone file modifications during record edits (SEC-426). | 01/08/2019 |
| CVE-2018-20889 | 中危4.4 | cPanel before 74.0.0 allows certain file-read operations via password file caching (SEC-425). | 01/08/2019 |
| CVE-2018-20888 | 中危5.5 | cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication (SEC-424). | 01/08/2019 |
| CVE-2018-20887 | 严重9.8 | cPanel before 74.0.0 allows SQL injection during database backups (SEC-420). | 01/08/2019 |
| CVE-2018-20886 | 中危5.3 | cPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418). | 01/08/2019 |
| CVE-2018-20885 | 中危5.3 | cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416). | 01/08/2019 |
| CVE-2018-20884 | 中危5.4 | cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367). | 01/08/2019 |
| CVE-2018-20883 | 中危6.5 | cPanel before 74.0.8 allows FTP access during account suspension (SEC-449). | 01/08/2019 |
| CVE-2018-20882 | 中危6.8 | cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447). | 01/08/2019 |
| CVE-2018-20881 | 中危5.4 | cPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446). | 01/08/2019 |
| CVE-2018-20880 | 低危3.3 | cPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file (SEC-445). | 01/08/2019 |
| CVE-2018-20879 | 中危6.3 | cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API (SEC-444). | 01/08/2019 |
| CVE-2018-20878 | 中危5.4 | cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface (SEC-441). | 01/08/2019 |
| CVE-2018-20877 | 中危5.4 | cPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437). | 01/08/2019 |
| CVE-2018-20876 | 中危5.4 | cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434). | 01/08/2019 |