2016 CVE Vulnerabilities
10,647 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-10816 | — | — | 1.8% | Aug 1, 2019 | cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders (SEC-121). |
| CVE-2016-10815 | — | — | 1.1% | Aug 1, 2019 | cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs (SEC-120). |
| CVE-2016-10814 | — | — | 1.3% | Aug 1, 2019 | cPanel before 57.9999.54 allows demo-mode escape via show_template.stor (SEC-119). |
| CVE-2016-10813 | — | — | 0.6% | Aug 1, 2019 | cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains (SEC-118). |
| CVE-2016-10835 | — | — | 0.9% | Aug 1, 2019 | cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging (SEC-107). |
| CVE-2016-10834 | — | — | 1.4% | Aug 1, 2019 | cPanel before 55.9999.141 allows account-suspension bypass via ftp (SEC-105). |
| CVE-2016-10833 | — | — | 1.3% | Aug 1, 2019 | cPanel before 55.9999.141 mishandles username-based blocking for PRE requests in cPHulkd (SEC-104). |
| CVE-2016-10832 | — | — | 1.0% | Aug 1, 2019 | cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging (SEC-102). |
| CVE-2016-10831 | — | — | 1.4% | Aug 1, 2019 | cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account (SEC-101). |
| CVE-2016-10830 | — | — | 1.0% | Aug 1, 2019 | cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100). |
| CVE-2016-10829 | — | — | 1.0% | Aug 1, 2019 | cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99). |
| CVE-2016-10828 | — | — | 2.6% | Aug 1, 2019 | cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97). |
| CVE-2016-10827 | — | — | 0.6% | Aug 1, 2019 | cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96). |
| CVE-2016-10825 | — | — | 1.1% | Aug 1, 2019 | cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92). |
| CVE-2016-10824 | — | — | 2.5% | Aug 1, 2019 | cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90). |
| CVE-2016-10823 | — | — | 2.1% | Aug 1, 2019 | cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpo... |
| CVE-2016-10822 | — | — | 0.6% | Aug 1, 2019 | cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88). |
| CVE-2016-10849 | — | — | 0.9% | Aug 1, 2019 | cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82). |
| CVE-2016-10848 | — | — | 1.4% | Aug 1, 2019 | cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81). |
| CVE-2016-10847 | — | — | 1.1% | Aug 1, 2019 | cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80). |
| CVE-2016-10846 | — | — | 1.3% | Aug 1, 2019 | cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC... |
| CVE-2016-10845 | — | — | 1.1% | Aug 1, 2019 | cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78). |
| CVE-2016-10844 | — | — | 1.1% | Aug 1, 2019 | The chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77). |
| CVE-2016-10843 | — | — | 1.4% | Aug 1, 2019 | cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76). |
| CVE-2016-10842 | — | — | 1.1% | Aug 1, 2019 | cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74). |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now