Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 431

Export CSV
CVE-2016-10774

cPanel before 60.0.25 allows self XSS in the tail_ea4_migration.cgi interface (SEC-172).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10773

cPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171).

CVSS 3.0 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10772

cPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang adminbin (SEC-168).

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10771

cPanel before 60.0.25 allows file-create and file-chmod operations during ModSecurity Audit logfile processing (SEC-165).

CVSS 3.0 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10770

cPanel before 60.0.25 allows arbitrary file-overwrite operations during a Roundcube update (SEC-164).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10769

cPanel before 60.0.25 allows an open redirect via /cgi-sys/FormMail-clone.cgi (SEC-162).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10768

cPanel before 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC-161).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10767

cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2015-9291

cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-1221).

CVSS 3.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2012-6449

The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel Whm
CVE-2012-6448

Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Cpanel
Products
Webhost Manager