Latest vulnerabilities for "cpanel cpanel" 65.9999.38

7.5

First published (updated )

CVE-2017-18431

Cpanel CpanelInput Validation

4.7

First published (updated )

CVE-2017-18430

Cpanel CpanelIn cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account ter…

3.3

First published (updated )

CVE-2017-18429

Cpanel CpanelInfoleak

2.5

First published (updated )

CVE-2017-18428

Cpanel CpanelIn cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289).

3.3

First published (updated )

CVE-2017-18427

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelIn cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disapp…

7.8

First published (updated )

CVE-2017-18413

Cpanel CpanelcPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mi…

2.5

First published (updated )

CVE-2017-18412

Cpanel CpanelInput Validation

6.8

First published (updated )

CVE-2017-18411

Cpanel CpanelInput Validation

6.5

First published (updated )

CVE-2017-18410

Cpanel CpanelInput Validation

6.5

First published (updated )

CVE-2017-18409

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelXSS

5.4

First published (updated )

CVE-2017-18408

Cpanel CpanelcPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement downl…

5.8

First published (updated )

CVE-2017-18407

Cpanel CpanelSQL Injection

7.5

First published (updated )

CVE-2017-18406

Cpanel CpanelInput Validation

5.5

First published (updated )

CVE-2017-18405

Cpanel CpanelcPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD (SEC-341).

4.9

First published (updated )

CVE-2017-18404

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelcPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archive…

6.5

First published (updated )

CVE-2017-18403

Cpanel CpanelXSS

5.4

First published (updated )

CVE-2017-18402

Cpanel CpanelInput Validation

4

First published (updated )

CVE-2017-18401

Cpanel CpanelCommand Injection

7.8

First published (updated )

CVE-2017-18400

Cpanel CpanelcPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon…

4.3

First published (updated )

CVE-2017-18399

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelInput Validation

5.5

First published (updated )

CVE-2017-18398

Cpanel CpanelcPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330).

3.3

First published (updated )

CVE-2017-18397

Cpanel CpanelInfoleak

5.5

First published (updated )

CVE-2017-18396

Cpanel CpanelInput Validation

4

First published (updated )

CVE-2017-18395

Cpanel CpanelInput Validation

4

First published (updated )

CVE-2017-18394

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelInput Validation

4

First published (updated )

CVE-2017-18393

Cpanel CpanelInput Validation

2.1

First published (updated )

CVE-2017-18392

Cpanel CpanelInfoleak

2.5

First published (updated )

CVE-2017-18391

Cpanel CpanelcPanel before 68.0.15 allows code execution in the context of the root account because of weak permi…

7.8

First published (updated )

CVE-2017-18390

Cpanel CpanelcPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318).

6.5

First published (updated )

CVE-2017-18389

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelInput Validation

7.8

First published (updated )

CVE-2017-18388

Cpanel CpanelcPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upl…

critical

9

First published (updated )

CVE-2017-18387

Cpanel CpanelcPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-3…

critical

9

First published (updated )

CVE-2017-18386

Cpanel CpanelcPanel before 68.0.15 allows unprivileged users to access restricted directories during account rest…

5.5

First published (updated )

CVE-2017-18385

Cpanel CpanelcPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310)…

3.8

First published (updated )

CVE-2017-18384

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelcPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).

7.8

First published (updated )

CVE-2017-18383

Cpanel CpanelInput Validation

4

First published (updated )

CVE-2017-18382

Cpanel CpanelXSS

6.1

First published (updated )

CVE-2018-20953

Cpanel CpanelInfoleak

6.5

First published (updated )

CVE-2018-20952

Cpanel CpanelXSS

6.1

First published (updated )

CVE-2018-20951

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel CpanelXSS

6.1

First published (updated )

CVE-2018-20950

Cpanel CpanelXSS

6.1

First published (updated )

CVE-2018-20949

Cpanel CpanelXSS

6.1

First published (updated )

CVE-2018-20948

Cpanel CpanelcPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).

5.5

First published (updated )

CVE-2018-20947

Cpanel CpanelInfoleak

3.3

First published (updated )

CVE-2018-20946

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cpanel Cpanelbin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).

7.9

First published (updated )

CVE-2018-20945

Cpanel CpanelInfoleak

3.3

First published (updated )

CVE-2018-20944

Cpanel CpanelInfoleak

2.5

First published (updated )

CVE-2018-20943

Cpanel CpanelInfoleak

2.5

First published (updated )

CVE-2018-20942

Cpanel CpanelRace Condition

3.3

First published (updated )

CVE-2018-20940

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.