CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 25/09/2020 |
| CVE-2020-26109 | 高危7.5 | cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification (SEC-557). | 25/09/2020 |
| CVE-2020-26108 | 严重9.8 | cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488). | 25/09/2020 |
| CVE-2020-26107 | 高危7.5 | cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561). | 25/09/2020 |
| CVE-2020-26106 | 高危7.5 | cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558). | 25/09/2020 |
| CVE-2020-26105 | 严重9.8 | In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554). | 25/09/2020 |
| CVE-2020-26104 | 高危7.5 | In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM (SEC-552). | 25/09/2020 |
| CVE-2020-26103 | 高危7.5 | In cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM (SEC-551). | 25/09/2020 |
| CVE-2020-26102 | 高危7.5 | In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM (SEC-550). | 25/09/2020 |
| CVE-2020-26101 | 严重9.8 | In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549). | 25/09/2020 |
| CVE-2020-26100 | 严重9.8 | chsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497). | 25/09/2020 |
| CVE-2020-26099 | 高危7.5 | cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism (SEC-491). | 25/09/2020 |
| CVE-2020-26098 | 严重9.8 | cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution (SEC-485). | 25/09/2020 |
| CVE-2020-12785 | 高危8.1 | cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540). | 11/05/2020 |
| CVE-2020-12784 | 中危5.3 | cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings (SEC-505). | 11/05/2020 |
| CVE-2020-10122 | 中危6.5 | cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547). | 17/03/2020 |