CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危5.3 |
cPanel before 80.0.5 allows local code execution in the context of a different cPanel account because of insecure cpphp execution (SEC-486). |
| 30/07/2019 |
| CVE-2018-20870 | 中危5.5 | The WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467). | 30/07/2019 |
| CVE-2018-20869 | 高危7.8 | cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin (SEC-465). | 30/07/2019 |
| CVE-2018-20868 | 中危6.1 | cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464). | 30/07/2019 |
| CVE-2018-20866 | 中危6.1 | cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461). | 30/07/2019 |
| CVE-2018-20865 | 中危6.1 | cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field (SEC-459). | 30/07/2019 |
| CVE-2018-20864 | 中危6.5 | cPanel before 76.0.8 allows a persistent Virtual FTP accounts after removal of its associated domain (SEC-454). | 30/07/2019 |
| CVE-2018-20863 | 严重9.8 | cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments (SEC-452). | 30/07/2019 |
| CVE-2018-20862 | 高危7.8 | cPanel before 76.0.8 unsafely performs PostgreSQL password changes (SEC-366). | 30/07/2019 |
| CVE-2019-14392 | 高危8.8 | cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching (SEC-501). | 30/07/2019 |
| CVE-2018-20867 | 中危6.1 | cPanel before 76.0.8 has an open redirect when resetting connections (SEC-462). | 30/07/2019 |
| CVE-2019-14391 | 低危3.3 | cPanel before 82.0.2 does not properly enforce Reseller package creation ACLs (SEC-514). | 30/07/2019 |
| CVE-2019-14390 | 中危5.4 | cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface (SEC-512). | 30/07/2019 |
| CVE-2019-14389 | 高危7.8 | cPanel before 82.0.2 allows local users to discover the MySQL root password (SEC-510). | 30/07/2019 |
| CVE-2019-14388 | 高危7.5 | cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled (SEC-507). | 30/07/2019 |
| CVE-2019-14387 | 中危6.1 | cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates (SEC-506). | 30/07/2019 |