CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 严重9.1 |
cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542). |
| 17/03/2020 |
| CVE-2020-10116 | 中危5.3 | cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541). | 17/03/2020 |
| CVE-2020-10115 | 高危7.2 | cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. (SEC-537). | 17/03/2020 |
| CVE-2020-10114 | 中危6.1 | cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535). | 17/03/2020 |
| CVE-2020-10113 | 中危6.1 | cPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515). | 17/03/2020 |
| CVE-2019-20498 | 严重9.8 | cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect (SEC-534). | 17/03/2020 |
| CVE-2019-20497 | 中危5.4 | cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration (SEC-533). | 17/03/2020 |
| CVE-2019-20496 | 中危5.5 | cPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log processing (SEC-532). | 17/03/2020 |
| CVE-2019-20495 | 中危6.5 | cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming (SEC-531). | 17/03/2020 |
| CVE-2019-20494 | 低危3.3 | In cPanel before 82.0.18, Cpanel::Rand::Get can produce a predictable series of numbers (SEC-525). | 17/03/2020 |
| CVE-2019-20493 | 中危6.1 | cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520). | 17/03/2020 |
| CVE-2019-20492 | 高危8.8 | cPanel before 82.0.18 allows authentication bypass because of misparsing of the format of the password file (SEC-516). | 17/03/2020 |
| CVE-2019-20490 | 高危8.8 | cPanel before 82.0.18 allows authentication bypass because webmail usernames are processed inconsistently (SEC-499). | 17/03/2020 |
| CVE-2019-20491 | 中危5.4 | cPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account suspensions (SEC-508). | 16/03/2020 |
| CVE-2012-6449 | 中危5.4 | The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability. | 10/02/2020 |
| CVE-2019-17380 | 中危6.1 | cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface (SEC-528). | 09/10/2019 |