Export limit exceeded: 51992 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 51,992

Export CSV
CVE-2018-20949

cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20948

cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20935

cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20933

cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20928

cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20923

cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20922

cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20921

cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20920

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20919

cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20918

cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20916

cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20915

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20911

cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup (SEC-359).

CVSS 3.0 · 7.2 High EPSS 1.6% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20910

cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20903

cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20901

cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20900

cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20899

cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2018-20884

cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel