Export limit exceeded: 24500 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (24500 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2017-18432 1 Cpanel 1 Cpanel 2024-11-21 N/A
In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234).
CVE-2017-18431 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts (CPANEL-13941).
CVE-2017-18430 1 Cpanel 1 Cpanel 2024-11-21 N/A
In cPanel before 66.0.2, user and group ownership may be incorrectly set when using reassign_post_terminate_cruft (SEC-294).
CVE-2017-18428 1 Cpanel 1 Cpanel 2024-11-21 N/A
In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290).
CVE-2017-18424 1 Cpanel 1 Cpanel 2024-11-21 N/A
In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt (SEC-274).
CVE-2017-18415 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302).
CVE-2017-18411 1 Cpanel 1 Cpanel 2024-11-21 N/A
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account (SEC-285).
CVE-2017-18410 1 Cpanel 1 Cpanel 2024-11-21 N/A
In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server (SEC-284).
CVE-2017-18409 1 Cpanel 1 Cpanel 2024-11-21 N/A
In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases (SEC-283).
CVE-2017-18405 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345).
CVE-2017-18401 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats (SEC-334).
CVE-2017-18398 1 Cpanel 1 Cpanel 2024-11-21 N/A
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331).
CVE-2017-18396 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329).
CVE-2017-18395 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 does not block a username of ssl (SEC-328).
CVE-2017-18394 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327).
CVE-2017-18393 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail (SEC-326).
CVE-2017-18392 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts (SEC-325).
CVE-2017-18391 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval (SEC-323).
CVE-2017-18388 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315).
CVE-2017-18382 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306).