Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (323683 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2017-18395 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 does not block a username of ssl (SEC-328).
CVE-2017-18394 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327).
CVE-2017-18393 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail (SEC-326).
CVE-2017-18392 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts (SEC-325).
CVE-2017-18391 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval (SEC-323).
CVE-2017-18390 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups (SEC-322).
CVE-2017-18389 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318).
CVE-2017-18388 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315).
CVE-2017-18387 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314).
CVE-2017-18386 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313).
CVE-2017-18385 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311).
CVE-2017-18384 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310).
CVE-2017-18383 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).
CVE-2017-18382 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306).
CVE-2017-18381 1 Edx 1 Edx-platform 2024-11-21 7.2 High
The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials.
CVE-2017-18380 1 Edx 1 Edx-platform 2024-11-21 7.5 High
edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain name.
CVE-2017-18379 1 Linux 1 Linux Kernel 2024-11-21 9.8 Critical
In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c.
CVE-2017-18378 1 Netgear 2 Readynas Surveillance, Readynas Surveillance Firmware 2024-11-21 N/A
In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through $tmp_upload_dir, leading to upgrade_handle.php?cmd=writeuploaddir remote command execution.
CVE-2017-18377 1 Goahead 2 Wireless Ip Camera Wificam, Wireless Ip Camera Wificam Firmware 2024-11-21 9.8 Critical
An issue was discovered on Wireless IP Camera (P2P) WIFICAM cameras. There is Command Injection in the set_ftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a set_ftp.cgi?svr=192.168.1.1&port=21&user=ftp URI.
CVE-2017-18376 1 Strangebee 1 Thehive 2024-11-21 N/A
An improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1 allows users with read-only or read/write access to escalate their privileges to the administrator's privileges. This affects app/controllers/UserCtrl.scala.