CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface (SEC-521). |
| 09/10/2019 |
| CVE-2019-17375 | 高危8.8 | cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517). | 09/10/2019 |
| CVE-2016-10812 | 高危8.8 | In cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs (SEC-117). | 07/08/2019 |
| CVE-2016-10811 | 高危8.8 | In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs (SEC-116). | 07/08/2019 |
| CVE-2016-10810 | 高危8.8 | In cPanel before 57.9999.54, /scripts/maildir_converter exposed a TTY to an unprivileged process (SEC-115). | 07/08/2019 |
| CVE-2016-10809 | 高危8.8 | In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process (SEC-114). | 07/08/2019 |
| CVE-2016-10808 | 高危8.8 | In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs (SEC-113). | 07/08/2019 |
| CVE-2016-10807 | 中危6.5 | cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost (SEC-112). | 07/08/2019 |
| CVE-2016-10806 | 中危5.4 | cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page (SEC-110). | 07/08/2019 |
| CVE-2016-10805 | 高危8.8 | cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-109). | 07/08/2019 |
| CVE-2016-10804 | 高危8.1 | The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore (SEC-58). | 07/08/2019 |
| CVE-2016-10803 | 高危7.5 | cPanel before 57.9999.105 allows newline injection via LOC records (CPANEL-6923). | 07/08/2019 |
| CVE-2016-10802 | 高危8.8 | cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler (SEC-142). | 07/08/2019 |
| CVE-2016-10801 | 高危8.8 | cPanel before 58.0.4 has improper session handling for shared users (SEC-139). | 07/08/2019 |
| CVE-2016-10800 | 高危7.8 | cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138). | 07/08/2019 |
| CVE-2016-10799 | 中危5.5 | cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation (SEC-137). | 07/08/2019 |