Latest vulnerabilities for "cpanel cpanel" 63.9999.74

7.8

First published (updated )

CVE-2017-18434

Cpanel CpanelXEE

6.5

First published (updated )

CVE-2017-18438

Cpanel CpanelMalicious File Upload

7.5

First published (updated )

CVE-2017-18435

Cpanel CpanelcPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240).

4.4

First published (updated )

CVE-2017-18437

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelInput Validation

6.5

First published (updated )

CVE-2017-18439

Cpanel CpanelCommand Injection

5.3

First published (updated )

CVE-2017-18442

Cpanel CpanelIn cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account ter…

3.3

First published (updated )

CVE-2017-18429

Cpanel CpanelcPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPC…

6.5

First published (updated )

CVE-2017-18446

Cpanel CpanelInput Validation

5.3

First published (updated )

CVE-2017-18444

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelPath Traversal

5.3

First published (updated )

CVE-2017-18448

Cpanel CpanelInput Validation

6.5

First published (updated )

CVE-2017-18447

Cpanel CpanelInput Validation

4.7

First published (updated )

CVE-2017-18430

Cpanel CpanelInput Validation

5.5

First published (updated )

CVE-2017-18405

Cpanel CpanelInput Validation, SQL Injection

5.5

First published (updated )

CVE-2017-18449

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelIn cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289).

3.3

First published (updated )

CVE-2017-18427

Cpanel CpanelSQL Injection

7.5

First published (updated )

CVE-2017-18406

Cpanel CpanelInfoleak, SQL Injection

7.8

First published (updated )

CVE-2017-18432

Cpanel CpanelcPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD (SEC-341).

4.9

First published (updated )

CVE-2017-18404

Cpanel CpanelInfoleak

2.5

First published (updated )

CVE-2017-18428

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelInput Validation

6.5

First published (updated )

CVE-2017-18409

Cpanel CpanelInput Validation

5.8

First published (updated )

CVE-2017-18443

Cpanel CpanelcPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245).

5

First published (updated )

CVE-2017-18441

Cpanel CpanelInfoleak

3.5

First published (updated )

CVE-2017-18436

Cpanel CpanelInput Validation

6.7

First published (updated )

CVE-2017-18452

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelSQL Injection

4.5

First published (updated )

CVE-2017-18450

Cpanel CpanelcPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement downl…

5.8

First published (updated )

CVE-2017-18407

Cpanel CpanelcPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249).

4.3

First published (updated )

CVE-2017-18445

Cpanel CpanelInput Validation

2.1

First published (updated )

CVE-2017-18392

Cpanel CpanelcPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-3…

critical

9

First published (updated )

CVE-2017-18386

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.