CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危5.4 |
cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211). |
| 05/08/2019 |
| CVE-2017-18480 | 中危6.5 | cPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-210). | 05/08/2019 |
| CVE-2017-18479 | 中危6.5 | In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209). | 05/08/2019 |
| CVE-2017-18478 | 中危6.5 | In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions (SEC-207). | 05/08/2019 |
| CVE-2017-18477 | 中危6.5 | In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206). | 05/08/2019 |
| CVE-2017-18476 | 高危7.5 | Leech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205). | 05/08/2019 |
| CVE-2017-18475 | 高危8.8 | In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user (SEC-204). | 05/08/2019 |
| CVE-2017-18474 | 中危6.5 | cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases (SEC-201). | 05/08/2019 |
| CVE-2017-18473 | 中危5.4 | cPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199). | 05/08/2019 |
| CVE-2017-18472 | 中危6.1 | cPanel before 62.0.4 allows reflected XSS in reset-password interfaces (SEC-198). | 05/08/2019 |
| CVE-2017-18471 | 中危5.4 | cPanel before 62.0.4 allows self XSS on the paper_lantern password-change screen (SEC-197). | 05/08/2019 |
| CVE-2017-18470 | 高危8.8 | cPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196). | 05/08/2019 |
| CVE-2017-18469 | 中危6.3 | cPanel before 62.0.17 allows demo accounts to execute code via an NVData_fetchinc API call (SEC-233). | 05/08/2019 |
| CVE-2016-10775 | 中危6.5 | cPanel before 60.0.25 allows arbitrary file-chown operations via reassign_post_terminate_cruft (SEC-173). | 05/08/2019 |
| CVE-2016-10774 | 中危5.4 | cPanel before 60.0.25 allows self XSS in the tail_ea4_migration.cgi interface (SEC-172). | 05/08/2019 |
| CVE-2016-10773 | 高危8.8 | cPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171). | 05/08/2019 |