Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Cpanel CpanelInput Validation

Risk 55
Severity
6.8
Input Validation
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H

cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447).

First published (updated )
CVE-2018-20882

Cpanel CpanelInput Validation

Risk 32
Severity
5.5
Input Validation
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration (SEC-436).

First published (updated )
CVE-2018-20891

Cpanel CpanelcPanel before 74.0.0 allows file modification in the context of the root account because of incorrec…

Risk 32
Severity
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication (SEC-424).

First published (updated )
CVE-2018-20888

Cpanel CpanelXSS

Risk 34
Severity
5.4
XSS
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface (SEC-428).

First published (updated )
CVE-2018-20874

Cpanel CpanelcPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).

Risk 39
Severity
5.3
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).

First published (updated )
CVE-2018-20886

Cpanel CpanelInfoleak

Risk 29
Severity
4.4
Infoleak
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

cPanel before 74.0.0 allows certain file-read operations via password file caching (SEC-425).

First published (updated )
CVE-2018-20889

Cpanel CpanelcPanel before 74.0.0 allows arbitrary zone file modifications during record edits (SEC-426).

Risk 22
Severity
4.3
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

cPanel before 74.0.0 allows arbitrary zone file modifications during record edits (SEC-426).

First published (updated )
CVE-2018-20890

Cpanel CpanelcPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handli…

Risk 22
Severity
4.3
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling (SEC-439).

First published (updated )
CVE-2018-20892

Cpanel CpanelInfoleak

Risk 18
Severity
3.3
Infoleak
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories (SEC-443).

First published (updated )
CVE-2018-20894

Cpanel CpanelInput Validation

Risk 18
Severity
3.3
Input Validation
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

cPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409).

First published (updated )
CVE-2018-20873

Cpanel CpanelInput Validation

Risk 13
Severity
2.3
Input Validation
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

cPanel before 74.0.0 allows file-rename operations during account renames (SEC-442).

First published (updated )
CVE-2018-20893

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203