Cpanel CpanelIn cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on files (SEC-589).
Cpanel CpanelIn cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584).
Cpanel CpanelIn cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings…
Cpanel CpanelcPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547).
Cpanel CpanelcPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log proc…
Cpanel CpanelcPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming (SEC-5…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account …
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation (SEC-137).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelCVE-2016-10778
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.