CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk parameter in the update request being transmitted to the operating system's package manager...

7.5CVSS6.8AI score0.00626EPSS

Exploits0References1

RedhatCVE•added 2025/05/22 9:26 p.m.•7 views

CVE-2021-30071

A cross-site scripting XSS vulnerability in /admin/listkey.html of HestiaCP before v1.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

6.1CVSS5.8AI score0.00502EPSS

Exploits0References1

RedhatCVE•added 2025/05/22 8:8 p.m.•9 views

CVE-2021-3797

hestiacp is vulnerable to Use of Wrong Operator in String Comparison...

9.8CVSS6.9AI score0.01111EPSS

Exploits1References1

RedhatCVE•added 2025/02/05 11:2 p.m.•12 views

CVE-2022-1509

Command Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12. An authenticated remote attacker with low privileges can execute arbitrary code under root context...

9.9CVSS7.9AI score0.04459EPSS

Exploits1References1

Positive Technologies•added 2022/08/18 12:0 a.m.•2 views

PT-2022-9949 · Hestiacp · Hestiacp

Name of the Vulnerable Software and Affected Versions: HestiaCP versions prior to 1.3.5 Description: A cross-site scripting XSS issue in the "/admin/list key.html" endpoint allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For versions prior to 1.3....

6.1CVSS6AI score0.00502EPSS

Exploits0References6

CNNVD•added 2022/08/05 12:0 a.m.•5 views

hestiacp 安全漏洞

hestiacp is a lightweight and powerful control panel for modern networks. A security vulnerability exists in hestiacp versions prior to 1.6.6 that stems from incorrect privilege assignment...

9.1CVSS7.9AI score0.01035EPSS

Exploits1References3

Positive Technologies•added 2022/07/27 12:0 a.m.•10 views

PT-2022-17334 · Hestiacp · Hestiacp

Name of the Vulnerable Software and Affected Versions: hestiacp/hestiacp versions prior to 1.6.5 Description: The issue is an OS Command Injection in the GitHub repository hestiacp/hestiacp. Recommendations: For versions prior to 1.6.5, update to version 1.6.5 or later to resolve the issue...

9.9CVSS9.4AI score0.4749EPSS

Exploits1References5

Positive Technologies•added 2022/04/28 12:0 a.m.•7 views

PT-2022-13923 · Hestiacp · Hestiacp

Name of the Vulnerable Software and Affected Versions: hestiacp/hestiacp versions prior to 1.5.12 Description: The issue allows an authenticated remote attacker with low privileges to execute arbitrary code under root context. This is due to a command injection vulnerability in the GitHub...

9.9CVSS8.2AI score0.04459EPSS

Exploits1References6