Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior

Críticas / altas1288▼ 199 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

451 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-20493	Modificada	Media (6.1)	0.74%	—	Cpanel	17/3/2020	17/6/2026	cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520).
CVE-2019-20492	Modificada	Alta (8.8)	1.3%	—	Cpanel	17/3/2020	17/6/2026	cPanel before 82.0.18 allows authentication bypass because of misparsing of the format of the password file (SEC-516).
CVE-2019-20490	Modificada	Alta (8.8)	1.1%	—	Cpanel	17/3/2020	17/6/2026	cPanel before 82.0.18 allows authentication bypass because webmail usernames are processed inconsistently (SEC-499).
CVE-2019-20491	Modificada	Media (5.4)	0.71%	—	Cpanel	16/3/2020	17/6/2026	cPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account suspensions (SEC-508).
CVE-2012-6449	Modificada	Media (5.4)	0.59%	—	Cpanel Cpanel WHM	10/2/2020	16/6/2026	The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability.
CVE-2012-6448	Modificada	Media (6.1)	1.5%	💥 Exploit	Cpanel Webhost Manager	27/1/2020	16/6/2026	Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2019-17380	Modificada	Media (6.1)	0.78%	—	Cpanel	9/10/2019	17/6/2026	cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface (SEC-528).
CVE-2019-17379	Modificada	Media (6.1)	0.78%	—	Cpanel	9/10/2019	17/6/2026	cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface (SEC-527).
CVE-2019-17378	Modificada	Media (6.1)	0.78%	—	Cpanel	9/10/2019	17/6/2026	cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface (SEC-526).
CVE-2019-17377	Modificada	Media (6.1)	0.78%	—	Cpanel	9/10/2019	17/6/2026	cPanel before 82.0.15 allows self XSS in LiveAPI example scripts (SEC-524).
CVE-2019-17376	Modificada	Media (6.1)	0.48%	—	Cpanel	9/10/2019	17/6/2026	cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface (SEC-521).
CVE-2019-17375	Modificada	Alta (8.8)	1.1%	—	Cpanel	9/10/2019	17/6/2026	cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517).
CVE-2016-10812	Modificada	Alta (8.8)	1.3%	—	Cpanel	7/8/2019	17/6/2026	In cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs (SEC-117).
CVE-2016-10811	Modificada	Alta (8.8)	1.3%	—	Cpanel	7/8/2019	17/6/2026	In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs (SEC-116).
CVE-2016-10810	Modificada	Alta (8.8)	1.3%	—	Cpanel	7/8/2019	17/6/2026	In cPanel before 57.9999.54, /scripts/maildir_converter exposed a TTY to an unprivileged process (SEC-115).
CVE-2016-10809	Modificada	Alta (8.8)	1.3%	—	Cpanel	7/8/2019	17/6/2026	In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process (SEC-114).
CVE-2016-10808	Modificada	Alta (8.8)	1.3%	—	Cpanel	7/8/2019	17/6/2026	In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs (SEC-113).
CVE-2016-10807	Modificada	Media (6.5)	0.91%	—	Cpanel	7/8/2019	17/6/2026	cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost (SEC-112).
CVE-2016-10806	Modificada	Media (5.4)	0.53%	—	Cpanel	7/8/2019	17/6/2026	cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page (SEC-110).
CVE-2016-10805	Modificada	Alta (8.8)	1.5%	—	Cpanel	7/8/2019	17/6/2026	cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-109).
CVE-2016-10804	Modificada	Alta (8.1)	1.1%	—	Cpanel	7/8/2019	17/6/2026	The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore (SEC-58).
CVE-2016-10803	Modificada	Alta (7.5)	0.88%	—	Cpanel	7/8/2019	17/6/2026	cPanel before 57.9999.105 allows newline injection via LOC records (CPANEL-6923).
CVE-2016-10802	Modificada	Alta (8.8)	1.2%	—	Cpanel	7/8/2019	17/6/2026	cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler (SEC-142).
CVE-2016-10801	Modificada	Alta (8.8)	1.1%	—	Cpanel	7/8/2019	17/6/2026	cPanel before 58.0.4 has improper session handling for shared users (SEC-139).
CVE-2016-10800	Modificada	Alta (7.8)	0.95%	—	Cpanel	7/8/2019	17/6/2026	cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138).