Cpanel CpanelcPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation (SEC-137).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 60.0.25 allows an open redirect via /cgi-sys/FormMail-clone.cgi (SEC-162).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-…
Cpanel CpanelIn cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelIn cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206…
Cpanel CpanelIn cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list (SEC-…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelIn cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-12…
Cpanel CpanelcPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging (SEC-102).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processi…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelThe bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).
Cpanel CpanelcPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav (S…
Cpanel CpanelcPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.