Export limit exceeded: 425850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 30231 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 30,231

Export CSV
CVE-2016-10816

cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders (SEC-121).

CVSS 3.0 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10815

cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs (SEC-120).

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10814

cPanel before 57.9999.54 allows demo-mode escape via show_template.stor (SEC-119).

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10812

In cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs (SEC-117).

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10811

In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs (SEC-116).

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10810

In cPanel before 57.9999.54, /scripts/maildir_converter exposed a TTY to an unprivileged process (SEC-115).

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10809

In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process (SEC-114).

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10808

In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs (SEC-113).

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10807

cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost (SEC-112).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10805

cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-109).

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10804

The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore (SEC-58).

CVSS 3.0 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10800

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138).

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10797

cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains (SEC-133).

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10794

cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10793

cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF scripts (SEC-152).

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10790

cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192).

CVSS 3.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10789

cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler (SEC-191).

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10788

cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin (SEC-188).

CVSS 3.0 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10787

The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries (SEC-187).

CVSS 3.0 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10786

cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC-186).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel