Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior

Críticas / altas1273▼ 220 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior

451 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-18390	Modificada	Alta (7.8)	0.47%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups (SEC-322).
CVE-2017-18389	Modificada	Media (6.3)	0.71%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318).
CVE-2017-18388	Modificada	Alta (7.8)	0.41%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315).
CVE-2017-18387	Modificada	Alta (7.2)	2.0%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314).
CVE-2017-18386	Modificada	Alta (7.2)	2.0%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313).
CVE-2017-18385	Modificada	Media (5.5)	0.34%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311).
CVE-2017-18384	Modificada	Baja (3.8)	0.32%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310).
CVE-2017-18383	Modificada	Alta (7.8)	0.38%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).
CVE-2017-18382	Modificada	Baja (2.7)	0.70%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306).
CVE-2016-10826	Modificada	Alta (8.8)	1.3%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests (SEC-93).
CVE-2016-10821	Modificada	Media (6.5)	1.1%	—	Cpanel	1/8/2019	17/6/2026	In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list (SEC-75).
CVE-2016-10820	Modificada	Alta (8.8)	1.3%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 55.9999.141 allows daemons to access their controlling TTYs (SEC-31).
CVE-2016-10819	Modificada	Media (6.5)	1.1%	—	Cpanel	1/8/2019	17/6/2026	In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125).
CVE-2016-10818	Modificada	Media (6.5)	1.6%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup (SEC-124).
CVE-2016-10817	Modificada	Crítica (9.8)	1.6%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file (SEC-123).
CVE-2016-10816	Modificada	Alta (8.8)	1.7%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders (SEC-121).
CVE-2016-10815	Modificada	Media (6.5)	1.1%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs (SEC-120).
CVE-2016-10814	Modificada	Alta (8.8)	1.3%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 57.9999.54 allows demo-mode escape via show_template.stor (SEC-119).
CVE-2016-10813	Modificada	Media (5.4)	0.64%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains (SEC-118).
CVE-2018-20953	Modificada	Media (6.1)	0.65%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389).
CVE-2018-20952	Modificada	Media (6.5)	0.88%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC-388).
CVE-2018-20951	Modificada	Media (6.1)	0.65%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387).
CVE-2018-20950	Modificada	Media (6.1)	0.65%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386).
CVE-2018-20949	Modificada	Media (6.1)	0.65%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385).
CVE-2018-20948	Modificada	Media (6.1)	0.65%	—	Cpanel	1/8/2019	17/6/2026	cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383).