2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-10769 | — | — | 0.7% | Aug 5, 2019 | cPanel before 60.0.25 allows an open redirect via /cgi-sys/FormMail-clone.cgi (SEC-162). |
| CVE-2016-10768 | — | — | 0.7% | Aug 5, 2019 | cPanel before 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC-161). |
| CVE-2016-10767 | — | — | 0.5% | Aug 5, 2019 | cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159). |
| CVE-2016-10826 | — | — | 1.3% | Aug 1, 2019 | cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests (SEC-93). |
| CVE-2016-10821 | — | — | 1.1% | Aug 1, 2019 | In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list (SEC-75). |
| CVE-2016-10820 | — | — | 1.3% | Aug 1, 2019 | cPanel before 55.9999.141 allows daemons to access their controlling TTYs (SEC-31). |
| CVE-2016-10819 | — | — | 1.1% | Aug 1, 2019 | In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125). |
| CVE-2016-10818 | — | — | 1.6% | Aug 1, 2019 | cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup (SEC-124). |
| CVE-2016-10817 | — | — | 1.6% | Aug 1, 2019 | cPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file (SEC-123). |
| CVE-2016-10816 | — | — | 1.8% | Aug 1, 2019 | cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders (SEC-121). |
| CVE-2016-10815 | — | — | 1.1% | Aug 1, 2019 | cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs (SEC-120). |
| CVE-2016-10814 | — | — | 1.3% | Aug 1, 2019 | cPanel before 57.9999.54 allows demo-mode escape via show_template.stor (SEC-119). |
| CVE-2016-10813 | — | — | 0.6% | Aug 1, 2019 | cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains (SEC-118). |
| CVE-2016-10835 | — | — | 0.9% | Aug 1, 2019 | cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging (SEC-107). |
| CVE-2016-10834 | — | — | 1.4% | Aug 1, 2019 | cPanel before 55.9999.141 allows account-suspension bypass via ftp (SEC-105). |
| CVE-2016-10833 | — | — | 1.3% | Aug 1, 2019 | cPanel before 55.9999.141 mishandles username-based blocking for PRE requests in cPHulkd (SEC-104). |
| CVE-2016-10832 | — | — | 1.0% | Aug 1, 2019 | cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging (SEC-102). |
| CVE-2016-10831 | — | — | 1.4% | Aug 1, 2019 | cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account (SEC-101). |
| CVE-2016-10830 | — | — | 1.0% | Aug 1, 2019 | cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100). |
| CVE-2016-10829 | — | — | 1.0% | Aug 1, 2019 | cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99). |
| CVE-2016-10828 | — | — | 2.6% | Aug 1, 2019 | cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97). |
| CVE-2016-10827 | — | — | 0.6% | Aug 1, 2019 | cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96). |
| CVE-2016-10825 | — | — | 1.1% | Aug 1, 2019 | cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92). |
| CVE-2016-10824 | — | — | 2.5% | Aug 1, 2019 | cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90). |
| CVE-2016-10823 | — | — | 2.1% | Aug 1, 2019 | cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpo... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now