CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危4.5 |
cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convert_roundcube_mysql2sqlite (SEC-255). |
| 02/08/2019 |
| CVE-2017-18449 | 中危5.5 | cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254). | 02/08/2019 |
| CVE-2017-18448 | 中危5.3 | cPanel before 64.0.21 allows certain file-read operations via a Serverinfo_manpage API call (SEC-252). | 02/08/2019 |
| CVE-2017-18447 | 中危6.3 | cPanel before 64.0.21 allows demo accounts to execute code via the ClamScanner_getsocket API (SEC-251). | 02/08/2019 |
| CVE-2017-18446 | 中危6.3 | cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250). | 02/08/2019 |
| CVE-2017-18445 | 中危4.3 | cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249). | 02/08/2019 |
| CVE-2017-18444 | 中危5.3 | cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248). | 02/08/2019 |
| CVE-2017-18443 | 中危5.8 | cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247). | 02/08/2019 |
| CVE-2017-18442 | 中危5.3 | cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246). | 02/08/2019 |
| CVE-2017-18441 | 中危5.0 | cPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245). | 02/08/2019 |
| CVE-2017-18440 | 中危4.3 | cPanel before 64.0.21 allows demo users to execute traceroute via api2 (SEC-244). | 02/08/2019 |
| CVE-2017-18439 | 中危6.3 | cPanel before 64.0.21 allows demo accounts to execute code via an ImageManager_dimensions API call (SEC-243). | 02/08/2019 |
| CVE-2017-18438 | 中危6.3 | cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls (SEC-242). | 02/08/2019 |
| CVE-2017-18437 | 中危4.4 | cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240). | 02/08/2019 |
| CVE-2017-18436 | 低危3.5 | cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call (SEC-239). | 02/08/2019 |
| CVE-2017-18435 | 高危7.3 | cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API (SEC-238). | 02/08/2019 |