Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 422

Export CSV
CVE-2018-20887

cPanel before 74.0.0 allows SQL injection during database backups (SEC-420).

CVSS 3.0 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20886

cPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).

CVSS 3.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20885

cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416).

CVSS 3.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20884

cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20883

cPanel before 74.0.8 allows FTP access during account suspension (SEC-449).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20882

cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447).

CVSS 3.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20881

cPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20880

cPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file (SEC-445).

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20879

cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API (SEC-444).

CVSS 3.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20878

cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface (SEC-441).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20876

cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20875

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface (SEC-433).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20874

cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface (SEC-428).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20873

cPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409).

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20870

The WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467).

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20869

cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin (SEC-465).

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20868

cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20867

cPanel before 76.0.8 has an open redirect when resetting connections (SEC-462).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20866

cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel