Search vulnerabilities

Expected end of text, found ':' (at char 28), (line:1, col:29)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,471

CVE-2016-10846

cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79).

CVSS 3.0 · 8.1 High EPSS 1.3% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10845

cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78).

CVSS 3.0 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10844

The chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77).

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10843

cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76).

CVSS 3.0 · 8.1 High EPSS 1.4% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10842

cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74).

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10841

The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).

CVSS 3.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10840

cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).

CVSS 3.0 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10839

cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71).

CVSS 3.0 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10838

cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script (SEC-70).

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10837

cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46).

CVSS 3.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10836

cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav (SEC-108).

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10835

cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging (SEC-107).

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10834

cPanel before 55.9999.141 allows account-suspension bypass via ftp (SEC-105).

CVSS 3.0 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10833

cPanel before 55.9999.141 mishandles username-based blocking for PRE requests in cPHulkd (SEC-104).

CVSS 3.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10832

cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging (SEC-102).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10831

cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account (SEC-101).

CVSS 3.0 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10830

cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100).

CVSS 3.0 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10829

cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99).

CVSS 3.0 · 6.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10828

cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97).

CVSS 3.0 · 8.8 High EPSS 2.6% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10827

cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel