Cpanel CpanelcPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-…
Cpanel CpanelIn cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelIn cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-22…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218).
Cpanel CpanelIn cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPC…
Cpanel CpanelcPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245).
Cpanel CpanelcPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement downl…
Cpanel CpanelcPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD (SEC-341).
Cpanel CpanelcPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archive…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.