Latest vulnerabilities for "cpanel cpanel" 61.9999.55

6.5

First published (updated )

CVE-2017-18482

Cpanel CpanelXSS

5.4

First published (updated )

CVE-2017-18481

Cpanel CpanelcPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-…

6.5

First published (updated )

CVE-2017-18480

Cpanel CpanelIn cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).

6.5

First published (updated )

CVE-2017-18479

Cpanel CpanelInfoleak

6.5

First published (updated )

CVE-2017-18478

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelIn cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206…

6.5

First published (updated )

CVE-2017-18477

Cpanel CpanelLeech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205).

7.5

First published (updated )

CVE-2017-18476

Cpanel CpanelInput Validation

8.8

First published (updated )

CVE-2017-18475

Cpanel CpanelInfoleak

6.8

First published (updated )

CVE-2017-18474

Cpanel CpanelXSS

5.4

First published (updated )

CVE-2017-18473

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelXSS

6.1

First published (updated )

CVE-2017-18472

Cpanel CpanelXSS

5.4

First published (updated )

CVE-2017-18471

Cpanel CpanelcPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).

8.8

First published (updated )

CVE-2017-18470

Cpanel CpanelInput Validation

6.5

First published (updated )

CVE-2017-18469

Cpanel CpanelCode Injection

6.5

First published (updated )

CVE-2017-18468

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelcPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-22…

4.3

First published (updated )

CVE-2017-18467

Cpanel CpanelInput Validation

4.4

First published (updated )

CVE-2017-18465

Cpanel CpanelInput Validation

4

First published (updated )

CVE-2017-18466

Cpanel CpanelInput Validation

5.5

First published (updated )

CVE-2017-18464

Cpanel CpanelcPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-22…

7.5

First published (updated )

CVE-2017-18462

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelInput Validation

7.8

First published (updated )

CVE-2017-18463

Cpanel CpanelInput Validation

5

First published (updated )

CVE-2017-18461

Cpanel CpanelInput Validation

7.8

First published (updated )

CVE-2017-18460

Cpanel CpanelInput Validation

7.8

First published (updated )

CVE-2017-18459

Cpanel CpanelInput Validation

low

3.6

First published (updated )

CVE-2017-18458

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelcPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218).

4.9

First published (updated )

CVE-2017-18457

Cpanel CpanelXSS

6.1

First published (updated )

CVE-2017-18456

Cpanel CpanelIn cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208).

4

First published (updated )

CVE-2017-18455

Cpanel CpanelXSS

5.4

First published (updated )

CVE-2017-18454

Cpanel CpanelInput Validation

6.7

First published (updated )

CVE-2017-18452

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelSQL Injection

4.5

First published (updated )

CVE-2017-18450

Cpanel CpanelInput Validation, SQL Injection

5.5

First published (updated )

CVE-2017-18449

Cpanel CpanelPath Traversal

5.3

First published (updated )

CVE-2017-18448

Cpanel CpanelInput Validation

6.5

First published (updated )

CVE-2017-18447

Cpanel CpanelcPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPC…

6.5

First published (updated )

CVE-2017-18446

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelcPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249).

4.3

First published (updated )

CVE-2017-18445

Cpanel CpanelInput Validation

5.3

First published (updated )

CVE-2017-18444

Cpanel CpanelInput Validation

5.8

First published (updated )

CVE-2017-18443

Cpanel CpanelCommand Injection

5.3

First published (updated )

CVE-2017-18442

Cpanel CpanelcPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245).

5

First published (updated )

CVE-2017-18441

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelInput Validation

6.5

First published (updated )

CVE-2017-18439

Cpanel CpanelXEE

6.5

First published (updated )

CVE-2017-18438

Cpanel CpanelcPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240).

4.4

First published (updated )

CVE-2017-18437

Cpanel CpanelInfoleak

low

3.5

First published (updated )

CVE-2017-18436

Cpanel CpanelMalicious File Upload

7.5

First published (updated )

CVE-2017-18435

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelInput Validation

7.8

First published (updated )

CVE-2017-18434

Cpanel CpanelInput Validation

critical

9

First published (updated )

CVE-2017-18433

Cpanel CpanelInfoleak, SQL Injection

7.8

First published (updated )

CVE-2017-18432

Cpanel CpanelInput Validation

4.7

First published (updated )

CVE-2017-18430

Cpanel CpanelIn cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account ter…

low

3.3

First published (updated )

CVE-2017-18429

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.