The Common Vulnerabilities and Exposures (CVE) project, maintained by the MITRE Corporation, is a list of all standardized names for vulnerabilities and security exposures.
| ID | Description | Priority | Modified date |
|---|---|---|---|
| CVE-2017-18336 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none | -- | Nov 7, 2023 |
| CVE-2017-18335 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none | -- | Nov 7, 2023 |
| CVE-2017-18334 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none | -- | Nov 7, 2023 |
| CVE-2017-18333 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none | -- | Nov 7, 2023 |
| CVE-2017-18325 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none | -- | Nov 7, 2023 |
| CVE-2016-10500 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none | -- | Nov 7, 2023 |
| CVE-2016-10488 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none | -- | Nov 7, 2023 |
| CVE-2016-10470 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none | -- | Nov 7, 2023 |
| CVE-2016-10468 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none | -- | Nov 7, 2023 |
| CVE-2016-10465 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none | -- | Nov 7, 2023 |
| CVE-2016-10463 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none | -- | Nov 7, 2023 |
| CVE-2016-10453 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none | -- | Nov 7, 2023 |
| CVE-2016-10413 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none | -- | Nov 7, 2023 |
| CVE-2019-14992 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9518. Reason: This candidate is a reservation duplicate of CVE-2019-9518. Notes: All CVE users should reference CVE-2019-9518 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | -- | Nov 7, 2023 |
| CVE-2019-14991 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9515. Reason: This candidate is a reservation duplicate of CVE-2019-9515. Notes: All CVE users should reference CVE-2019-9515 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | -- | Nov 7, 2023 |
| CVE-2019-14990 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9514. Reason: This candidate is a reservation duplicate of CVE-2019-9514. Notes: All CVE users should reference CVE-2019-9514 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | -- | Nov 7, 2023 |
| CVE-2019-14989 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9513. Reason: This candidate is a reservation duplicate of CVE-2019-9513. Notes: All CVE users should reference CVE-2019-9513 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | -- | Nov 7, 2023 |
| CVE-2019-14988 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9512. Reason: This candidate is a reservation duplicate of CVE-2019-9512. Notes: All CVE users should reference CVE-2019-9512 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | -- | Nov 7, 2023 |
| CVE-2019-14659 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none | -- | Nov 7, 2023 |
| CVE-2019-14655 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none | -- | Nov 7, 2023 |
| CVE-2019-14653 | pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element. | -- | Aug 5, 2019 |
| CVE-2018-20881 | cPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446). | -- | Aug 1, 2019 |
| CVE-2018-20879 | cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API (SEC-444). | -- | Aug 1, 2019 |
| CVE-2018-20878 | cPanel before 74.0.8 allows stored XSS in WHM \"File and Directory Restoration\" interface (SEC-441). | -- | Aug 1, 2019 |
| CVE-2018-20877 | cPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437). | -- | Aug 1, 2019 |
| CVE-2018-20876 | cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434). | -- | Aug 1, 2019 |
| CVE-2018-11892 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none | -- | Nov 7, 2023 |
| CVE-2019-14361 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-14439. Reason: This candidate is a reservation duplicate of CVE-2019-14439. Notes: All CVE users should reference CVE-2019-14439 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage | -- | Nov 7, 2023 |
| CVE-2019-14414 | In cPanel before 78.0.2, a Userdata cache temporary file can conflict with domains (SEC-478). | -- | Jul 30, 2019 |
| CVE-2019-14413 | cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets (SEC-476). | -- | Jul 30, 2019 |
| CVE-2019-14412 | Maketext in cPanel before 78.0.2 allows format-string injection in the DCV check_domains_via_dns UAPI (SEC-474). | -- | Jul 30, 2019 |
| CVE-2019-14411 | cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI (SEC-473). | -- | Jul 30, 2019 |
| CVE-2019-14410 | Maketext in cPanel before 78.0.2 allows format-string injection in the Email store_filter UAPI (SEC-472). | -- | Jul 30, 2019 |
| CVE-2019-14409 | cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin (SEC-466). | -- | Jul 30, 2019 |
| CVE-2019-14408 | cPanel before 78.0.2 allows a demo account to link with an OpenID provider (SEC-460). | -- | Jul 30, 2019 |
| CVE-2019-14407 | cPanel before 78.0.2 reveals internal data to OpenID providers (SEC-415). | -- | Jul 30, 2019 |
| CVE-2019-14406 | cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing (SEC-493). | -- | Jul 30, 2019 |
| CVE-2019-14405 | cPanel before 78.0.18 allows demo accounts to execute code via securitypolicy.cg (SEC-487). | -- | Jul 30, 2019 |
| CVE-2019-14404 | cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtual_user_spam router (SEC-484). | -- | Jul 30, 2019 |
| CVE-2019-14403 | cPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing (SEC-483). | -- | Jul 30, 2019 |
| CVE-2019-14402 | cPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp (SEC-481). | -- | Jul 30, 2019 |
| CVE-2019-14401 | cPanel before 78.0.18 allows code execution via an addforward API1 call (SEC-480). | -- | Jul 30, 2019 |
| CVE-2019-14400 | cPanel before 78.0.18 allows local users to escalate to root access because of userdata cache misparsing (SEC-479). | -- | Jul 30, 2019 |
| CVE-2019-14392 | cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching (SEC-501). | -- | Jul 30, 2019 |
| CVE-2019-14388 | cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled (SEC-507). | -- | Jul 30, 2019 |
| CVE-2019-14387 | cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates (SEC-506). | -- | Jul 30, 2019 |
| CVE-2019-14386 | cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface (SEC-504). | -- | Jul 30, 2019 |
| CVE-2018-20868 | cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464). | -- | Jul 30, 2019 |
| CVE-2018-20867 | cPanel before 76.0.8 has an open redirect when resetting connections (SEC-462). | -- | Jul 30, 2019 |
| CVE-2018-20866 | cPanel before 76.0.8 has Stored XSS in the WHM \"Reset a DNS Zone\" feature (SEC-461). | -- | Jul 30, 2019 |
