Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 422

Export CSV
CVE-2017-18387

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314).

CVSS 3.0 · 7.2 High EPSS 2.0% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18386

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313).

CVSS 3.0 · 7.2 High EPSS 2.0% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18385

cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311).

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18384

cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310).

CVSS 3.0 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18383

cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18382

cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306).

CVSS 3.0 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10860

cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API (SEC-66).

CVSS 3.0 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10859

cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65).

CVSS 3.0 · 8.1 High EPSS 1.0% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10858

cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64).

CVSS 3.0 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10857

cPanel before 11.54.0.0 allows a bypass of the e-mail sending limit (SEC-60).

CVSS 3.0 · 6.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10856

cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds (SEC-29).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10855

cPanel before 11.54.0.4 allows unauthenticated arbitrary code execution via cpsrvd (SEC-91).

CVSS 3.0 · 9.8 Critical EPSS 2.6% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10854

cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface (SEC-87).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10853

cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface (SEC-86).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10852

cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10851

cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface (SEC-84).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10850

cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC-83).

CVSS 3.0 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10849

cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10848

cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81).

CVSS 3.0 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10847

cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80).

CVSS 3.0 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel