CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危6.5 |
cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154). |
| 06/08/2019 |
| CVE-2016-10793 | 高危8.8 | cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF scripts (SEC-152). | 06/08/2019 |
| CVE-2016-10792 | 高危8.8 | cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives (SEC-141). | 06/08/2019 |
| CVE-2016-10791 | 中危5.3 | cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are impossible (CPANEL-9559). | 06/08/2019 |
| CVE-2016-10790 | 高危7.5 | cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192). | 06/08/2019 |
| CVE-2016-10789 | 高危8.8 | cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler (SEC-191). | 06/08/2019 |
| CVE-2016-10788 | 高危8.8 | cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin (SEC-188). | 06/08/2019 |
| CVE-2016-10787 | 高危8.1 | The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries (SEC-187). | 06/08/2019 |
| CVE-2016-10786 | 中危6.5 | cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC-186). | 06/08/2019 |
| CVE-2016-10785 | 中危6.5 | cPanel before 60.0.25 allows attackers to discover file contents during file copy operations (SEC-185). | 06/08/2019 |
| CVE-2016-10784 | 中危5.4 | cPanel before 60.0.25 allows self XSS in the alias upload interface (SEC-184). | 06/08/2019 |
| CVE-2016-10783 | 中危5.4 | cPanel before 60.0.25 allows self stored XSS in SSL_listkeys (SEC-182). | 06/08/2019 |
| CVE-2016-10782 | 中危5.4 | cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs (SEC-181). | 06/08/2019 |
| CVE-2016-10781 | 中危5.4 | cPanel before 60.0.25 allows self XSS in the UI_confirm API (SEC-180). | 06/08/2019 |
| CVE-2016-10780 | 中危5.4 | cPanel before 60.0.25 allows stored XSS in the ftp_sessions API (SEC-180). | 06/08/2019 |
| CVE-2016-10779 | 中危5.4 | cPanel before 60.0.25 allows stored XSS in api1_listautoresponders (SEC-179). | 06/08/2019 |