Latest vulnerabilities for "cpanel cpanel" 63.9999.74

6.7

First published (updated )

CVE-2017-18452

Cpanel CpanelSQL Injection

4.5

First published (updated )

CVE-2017-18450

Cpanel CpanelInput Validation, SQL Injection

5.5

First published (updated )

CVE-2017-18449

Cpanel CpanelPath Traversal

5.3

First published (updated )

CVE-2017-18448

Cpanel CpanelInput Validation

6.5

First published (updated )

CVE-2017-18447

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelcPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPC…

6.5

First published (updated )

CVE-2017-18446

Cpanel CpanelcPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249).

4.3

First published (updated )

CVE-2017-18445

Cpanel CpanelInput Validation

5.3

First published (updated )

CVE-2017-18444

Cpanel CpanelInput Validation

5.8

First published (updated )

CVE-2017-18443

Cpanel CpanelCommand Injection

5.3

First published (updated )

CVE-2017-18442

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelcPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245).

5

First published (updated )

CVE-2017-18441

Cpanel CpanelInput Validation

6.5

First published (updated )

CVE-2017-18439

Cpanel CpanelXEE

6.5

First published (updated )

CVE-2017-18438

Cpanel CpanelcPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240).

4.4

First published (updated )

CVE-2017-18437

Cpanel CpanelInfoleak

3.5

First published (updated )

CVE-2017-18436

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelMalicious File Upload

7.5

First published (updated )

CVE-2017-18435

Cpanel CpanelInput Validation

7.8

First published (updated )

CVE-2017-18434

Cpanel CpanelInput Validation

critical

9

First published (updated )

CVE-2017-18433

Cpanel CpanelInfoleak, SQL Injection

7.8

First published (updated )

CVE-2017-18432

Cpanel CpanelInput Validation

4.7

First published (updated )

CVE-2017-18430

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelIn cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account ter…

3.3

First published (updated )

CVE-2017-18429

Cpanel CpanelInfoleak

2.5

First published (updated )

CVE-2017-18428

Cpanel CpanelIn cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289).

3.3

First published (updated )

CVE-2017-18427

Cpanel CpanelInput Validation

6.5

First published (updated )

CVE-2017-18410

Cpanel CpanelInput Validation

6.5

First published (updated )

CVE-2017-18409

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelXSS

5.4

First published (updated )

CVE-2017-18408

Cpanel CpanelcPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement downl…

5.8

First published (updated )

CVE-2017-18407

Cpanel CpanelSQL Injection

7.5

First published (updated )

CVE-2017-18406

Cpanel CpanelInput Validation

5.5

First published (updated )

CVE-2017-18405

Cpanel CpanelcPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD (SEC-341).

4.9

First published (updated )

CVE-2017-18404

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelcPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archive…

6.5

First published (updated )

CVE-2017-18403

Cpanel CpanelXSS

5.4

First published (updated )

CVE-2017-18402

Cpanel CpanelInput Validation

4

First published (updated )

CVE-2017-18401

Cpanel CpanelCommand Injection

7.8

First published (updated )

CVE-2017-18400

Cpanel CpanelcPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon…

4.3

First published (updated )

CVE-2017-18399

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelInput Validation

5.5

First published (updated )

CVE-2017-18398

Cpanel CpanelcPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330).

3.3

First published (updated )

CVE-2017-18397

Cpanel CpanelInfoleak

5.5

First published (updated )

CVE-2017-18396

Cpanel CpanelInput Validation

4

First published (updated )

CVE-2017-18395

Cpanel CpanelInput Validation

4

First published (updated )

CVE-2017-18394

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelInput Validation

4

First published (updated )

CVE-2017-18393

Cpanel CpanelInput Validation

2.1

First published (updated )

CVE-2017-18392

Cpanel CpanelInfoleak

2.5

First published (updated )

CVE-2017-18391

Cpanel CpanelcPanel before 68.0.15 allows code execution in the context of the root account because of weak permi…

7.8

First published (updated )

CVE-2017-18390

Cpanel CpanelcPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318).

6.5

First published (updated )

CVE-2017-18389

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelInput Validation

7.8

First published (updated )

CVE-2017-18388

Cpanel CpanelcPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upl…

critical

9

First published (updated )

CVE-2017-18387

Cpanel CpanelcPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-3…

critical

9

First published (updated )

CVE-2017-18386

Cpanel CpanelcPanel before 68.0.15 allows unprivileged users to access restricted directories during account rest…

5.5

First published (updated )

CVE-2017-18385

Cpanel CpanelcPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310)…

3.8

First published (updated )

CVE-2017-18384

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.