Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (24841 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2016-10808 1 Cpanel 1 Cpanel 2024-11-21 N/A
In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs (SEC-113).
CVE-2016-10807 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost (SEC-112).
CVE-2016-10805 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-109).
CVE-2016-10804 1 Cpanel 1 Cpanel 2024-11-21 N/A
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore (SEC-58).
CVE-2016-10800 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138).
CVE-2016-10797 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains (SEC-133).
CVE-2016-10794 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154).
CVE-2016-10793 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF scripts (SEC-152).
CVE-2016-10790 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192).
CVE-2016-10789 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler (SEC-191).
CVE-2016-10788 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin (SEC-188).
CVE-2016-10787 1 Cpanel 1 Cpanel 2024-11-21 N/A
The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries (SEC-187).
CVE-2016-10786 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC-186).
CVE-2016-10785 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 60.0.25 allows attackers to discover file contents during file copy operations (SEC-185).
CVE-2016-10775 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 60.0.25 allows arbitrary file-chown operations via reassign_post_terminate_cruft (SEC-173).
CVE-2016-10771 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 60.0.25 allows file-create and file-chmod operations during ModSecurity Audit logfile processing (SEC-165).
CVE-2016-10770 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 60.0.25 allows arbitrary file-overwrite operations during a Roundcube update (SEC-164).
CVE-2016-10768 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC-161).
CVE-2016-10765 1 Edx 1 Edx-platform 2024-11-21 5.3 Medium
edx-platform before 2016-06-10 allows account activation with a spoofed e-mail address.
CVE-2016-10740 1 Atlassian 1 Crowd 2024-11-21 N/A
Various resources in Atlassian Crowd before version 2.10.1 allow remote attackers with administration rights to learn the passwords of configured LDAP directories by examining the responses to requests for these resources.