Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 449 respecto a la semana anterior

Críticas / altas1325▼ 128 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)268▼ 240 respecto a la semana anterior

451 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-18481	Modificada	Media (5.4)	0.53%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211).
CVE-2017-18480	Modificada	Media (6.5)	0.88%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-210).
CVE-2017-18479	Modificada	Media (6.5)	0.48%	—	Cpanel	5/8/2019	17/6/2026	In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).
CVE-2017-18478	Modificada	Media (6.5)	0.88%	—	Cpanel	5/8/2019	17/6/2026	In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions (SEC-207).
CVE-2017-18477	Modificada	Media (6.5)	0.88%	—	Cpanel	5/8/2019	17/6/2026	In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206).
CVE-2017-18476	Modificada	Alta (7.5)	1.1%	—	Cpanel	5/8/2019	17/6/2026	Leech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205).
CVE-2017-18475	Modificada	Alta (8.8)	1.1%	—	Cpanel	5/8/2019	17/6/2026	In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user (SEC-204).
CVE-2017-18474	Modificada	Media (6.5)	1.0%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases (SEC-201).
CVE-2017-18473	Modificada	Media (5.4)	0.53%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199).
CVE-2017-18472	Modificada	Media (6.1)	0.65%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.4 allows reflected XSS in reset-password interfaces (SEC-198).
CVE-2017-18471	Modificada	Media (5.4)	0.53%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.4 allows self XSS on the paper_lantern password-change screen (SEC-197).
CVE-2017-18470	Modificada	Alta (8.8)	0.98%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).
CVE-2017-18469	Modificada	Media (6.3)	0.95%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.17 allows demo accounts to execute code via an NVData_fetchinc API call (SEC-233).
CVE-2016-10775	Modificada	Media (6.5)	1.0%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 60.0.25 allows arbitrary file-chown operations via reassign_post_terminate_cruft (SEC-173).
CVE-2016-10774	Modificada	Media (5.4)	0.53%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 60.0.25 allows self XSS in the tail_ea4_migration.cgi interface (SEC-172).
CVE-2016-10773	Modificada	Alta (8.8)	1.1%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171).
CVE-2016-10772	Modificada	Baja (3.3)	0.34%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang adminbin (SEC-168).
CVE-2016-10771	Modificada	Alta (8.1)	0.89%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 60.0.25 allows file-create and file-chmod operations during ModSecurity Audit logfile processing (SEC-165).
CVE-2016-10770	Modificada	Media (6.5)	0.75%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 60.0.25 allows arbitrary file-overwrite operations during a Roundcube update (SEC-164).
CVE-2016-10769	Modificada	Media (6.1)	0.69%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 60.0.25 allows an open redirect via /cgi-sys/FormMail-clone.cgi (SEC-162).
CVE-2016-10768	Modificada	Media (6.5)	0.75%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC-161).
CVE-2016-10767	Modificada	Media (5.4)	0.53%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159).
CVE-2017-18468	Modificada	Media (6.3)	0.98%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API (SEC-232).
CVE-2017-18467	Modificada	Media (4.3)	0.71%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229).
CVE-2017-18466	Modificada	Baja (2.7)	0.62%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration (SEC-228).