2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-20933 | — | — | 0.5% | Aug 1, 2019 | cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410). |
| CVE-2018-20932 | — | — | 0.7% | Aug 1, 2019 | cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406). |
| CVE-2018-20931 | — | — | 1.0% | Aug 1, 2019 | cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405). |
| CVE-2018-20930 | — | — | 0.7% | Aug 1, 2019 | cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401). |
| CVE-2018-20929 | — | — | 0.6% | Aug 1, 2019 | cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392). |
| CVE-2018-20928 | — | — | 0.6% | Aug 1, 2019 | cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391). |
| CVE-2018-20927 | — | — | 0.3% | Aug 1, 2019 | cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382). |
| CVE-2018-20926 | — | — | 0.4% | Aug 1, 2019 | cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380). |
| CVE-2018-20925 | — | — | 0.3% | Aug 1, 2019 | cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379). |
| CVE-2018-20924 | — | — | 0.8% | Aug 1, 2019 | cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378). |
| CVE-2018-20923 | — | — | 0.6% | Aug 1, 2019 | cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377). |
| CVE-2018-20922 | — | — | 0.6% | Aug 1, 2019 | cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376). |
| CVE-2018-20921 | — | — | 0.6% | Aug 1, 2019 | cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375). |
| CVE-2018-20920 | — | — | 0.6% | Aug 1, 2019 | cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374). |
| CVE-2018-20919 | — | — | 0.6% | Aug 1, 2019 | cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373). |
| CVE-2018-20918 | — | — | 0.6% | Aug 1, 2019 | cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372). |
| CVE-2018-20917 | — | — | 0.3% | Aug 1, 2019 | cPanel before 70.0.23 allows any user to disable Solr (SEC-371). |
| CVE-2018-20916 | — | — | 0.5% | Aug 1, 2019 | cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370). |
| CVE-2018-20915 | — | — | 0.5% | Aug 1, 2019 | cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369). |
| CVE-2018-20914 | — | — | 0.8% | Aug 1, 2019 | In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368). |
| CVE-2018-20913 | — | — | 0.9% | Aug 1, 2019 | cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364). |
| CVE-2018-20912 | — | — | 1.0% | Aug 1, 2019 | cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362). |
| CVE-2018-20911 | — | — | 1.6% | Aug 1, 2019 | cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup (SEC-359). |
| CVE-2018-20910 | — | — | 0.6% | Aug 1, 2019 | cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357). |
| CVE-2018-20909 | — | — | 0.3% | Aug 1, 2019 | cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338). |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now