Export limit exceeded: 14426 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425863 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 11140 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425863 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 30233 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 30,233

Export CSV
CVE-2017-18444

cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248).

CVSS 3.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18443

cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247).

CVSS 3.0 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18440

cPanel before 64.0.21 allows demo users to execute traceroute via api2 (SEC-244).

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18439

cPanel before 64.0.21 allows demo accounts to execute code via an ImageManager_dimensions API call (SEC-243).

CVSS 3.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18436

cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call (SEC-239).

CVSS 3.0 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18434

cPanel before 64.0.21 allows code execution in the context of the root account via a SET_VHOST_LANG_PACKAGE multilang adminbin call (SEC-237).

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18433

cPanel before 64.0.21 allows code execution by webmail and demo accounts via a store_filter API call (SEC-236).

CVSS 3.0 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18432

In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234).

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18431

cPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts (CPANEL-13941).

CVSS 3.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18430

In cPanel before 66.0.2, user and group ownership may be incorrectly set when using reassign_post_terminate_cruft (SEC-294).

CVSS 3.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18428

In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290).

CVSS 3.0 · 2.5 Low EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18424

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt (SEC-274).

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18415

cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302).

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18411

The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account (SEC-285).

CVSS 3.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18410

In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server (SEC-284).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18409

In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases (SEC-283).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18405

cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345).

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18401

cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats (SEC-334).

CVSS 3.0 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18398

DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331).

CVSS 3.0 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2017-18396

cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329).

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel