Search vulnerabilities

Expected end of text, found ':' (at char 25), (line:1, col:26)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,740

CVE-2016-10835

cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging (SEC-107).

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10834

cPanel before 55.9999.141 allows account-suspension bypass via ftp (SEC-105).

CVSS 3.0 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10833

cPanel before 55.9999.141 mishandles username-based blocking for PRE requests in cPHulkd (SEC-104).

CVSS 3.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10832

cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging (SEC-102).

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10831

cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account (SEC-101).

CVSS 3.0 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10830

cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100).

CVSS 3.0 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10829

cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99).

CVSS 3.0 · 6.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10828

cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97).

CVSS 3.0 · 8.8 High EPSS 2.6% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10827

cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10826

cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests (SEC-93).

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10825

cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92).

CVSS 3.0 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10824

cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90).

CVSS 3.0 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10823

cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89).

CVSS 3.0 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10822

cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88).

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10821

In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list (SEC-75).

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10820

cPanel before 55.9999.141 allows daemons to access their controlling TTYs (SEC-31).

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10819

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125).

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10818

cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup (SEC-124).

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10817

cPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file (SEC-123).

CVSS 3.0 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Cpanel
Products
Cpanel
CVE-2016-10816

cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders (SEC-121).

CVSS 3.0 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Cpanel
Products
Cpanel