CVE Vulnerability

Home » CVE’s

CVE’s

CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
CVE-2018-20907
2020-08-24
N/A
4.3 MEDIUM
cPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432).
CVE-2018-20906
2020-08-24
N/A
4.3 MEDIUM
cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430).
CVE-2018-20905
2020-08-24
N/A
5.4 MEDIUM
cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429).
CVE-2018-20904
2020-08-24
N/A
4.3 MEDIUM
cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction (SEC-427).
CVE-2018-20903
2019-08-02
N/A
6.1 MEDIUM
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421).
CVE-2018-20902
2019-08-02
N/A
5.5 MEDIUM
cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation (SEC-408).
CVE-2018-20901
2019-08-02
N/A
6.1 MEDIUM
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400).
CVE-2018-20900
2019-08-06
N/A
6.1 MEDIUM
cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399).
CVE-2018-2090
2019-01-22
N/A
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE-2018-20899
2019-08-08
N/A
6.1 MEDIUM
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398).
1 … 1,989 1,990 1,991 1,992 1,993 … 11,258