Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior

Críticas / altas1324▼ 116 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior

451 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-18465	Modificada	Media (4.4)	0.35%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227).
CVE-2017-18464	Modificada	Media (4.9)	0.71%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226).
CVE-2017-18462	Modificada	Alta (7.5)	0.94%	—	Cpanel	5/8/2019	17/6/2026	cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-224).
CVE-2017-18463	Modificada	Alta (7.8)	0.47%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path (SEC-225).
CVE-2017-18461	Modificada	Media (4.3)	0.74%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 62.0.17 allows does not preserve security policy questions across an account rename (SEC-223).
CVE-2017-18460	Modificada	Alta (7.8)	0.47%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221).
CVE-2017-18459	Modificada	Alta (7.8)	0.47%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220).
CVE-2017-18458	Modificada	Baja (3.3)	0.34%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219).
CVE-2017-18457	Modificada	Media (4.4)	0.44%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218).
CVE-2017-18456	Modificada	Media (6.1)	0.65%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217).
CVE-2017-18455	Modificada	Baja (2.7)	0.83%	—	Cpanel	2/8/2019	17/6/2026	In cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208).
CVE-2017-18454	Modificada	Media (5.4)	0.53%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262).
CVE-2017-18453	Modificada	Media (4.9)	0.71%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 does not preserve supplemental groups across account renames (SEC-260).
CVE-2017-18452	Modificada	Media (6.7)	0.45%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 allows code execution via Rails configuration files (SEC-259).
CVE-2017-18451	Modificada	Media (5.3)	0.87%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval upon a cPAddon upgrade (SEC-257).
CVE-2017-18450	Modificada	Media (4.5)	0.28%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convert_roundcube_mysql2sqlite (SEC-255).
CVE-2017-18449	Modificada	Media (5.5)	0.34%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254).
CVE-2017-18448	Modificada	Media (5.3)	1.2%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 allows certain file-read operations via a Serverinfo_manpage API call (SEC-252).
CVE-2017-18447	Modificada	Media (6.3)	0.95%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 allows demo accounts to execute code via the ClamScanner_getsocket API (SEC-251).
CVE-2017-18446	Modificada	Media (6.3)	0.69%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250).
CVE-2017-18445	Modificada	Media (4.3)	0.63%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249).
CVE-2017-18444	Modificada	Media (5.3)	0.77%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248).
CVE-2017-18443	Modificada	Media (5.8)	0.77%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247).
CVE-2017-18442	Modificada	Media (5.3)	0.77%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246).
CVE-2017-18441	Modificada	Media (5)	0.60%	—	Cpanel	2/8/2019	17/6/2026	cPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245).