CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危6.5 |
cPanel before 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC-161). |
| 05/08/2019 |
| CVE-2016-10767 | 中危5.4 | cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159). | 05/08/2019 |
| CVE-2017-18468 | 中危6.3 | cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API (SEC-232). | 05/08/2019 |
| CVE-2017-18467 | 中危4.3 | cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229). | 05/08/2019 |
| CVE-2017-18466 | 低危2.7 | cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration (SEC-228). | 05/08/2019 |
| CVE-2017-18465 | 中危4.4 | cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227). | 05/08/2019 |
| CVE-2017-18464 | 中危4.9 | cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226). | 05/08/2019 |
| CVE-2017-18462 | 高危7.5 | cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-224). | 05/08/2019 |
| CVE-2017-18463 | 高危7.8 | cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path (SEC-225). | 02/08/2019 |
| CVE-2017-18461 | 中危4.3 | cPanel before 62.0.17 allows does not preserve security policy questions across an account rename (SEC-223). | 02/08/2019 |
| CVE-2017-18460 | 高危7.8 | cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221). | 02/08/2019 |
| CVE-2017-18459 | 高危7.8 | cPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220). | 02/08/2019 |
| CVE-2017-18458 | 低危3.3 | cPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219). | 02/08/2019 |
| CVE-2017-18457 | 中危4.4 | cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218). | 02/08/2019 |
| CVE-2017-18456 | 中危6.1 | cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217). | 02/08/2019 |
| CVE-2017-18455 | 低危2.7 | In cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208). | 02/08/2019 |