Filter
AND
Cpanel CpanelIn cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on files (SEC-589).
4.4
First published (updated )
Cpanel CpanelIn cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584).
5.5
First published (updated )
Cpanel CpanelIn cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575).
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567).
4.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings…
5.3
First published (updated )
Cpanel CpanelcPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547).
6.5
First published (updated )
Cpanel CpanelcPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log proc…
5.5
First published (updated )
Cpanel CpanelcPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming (SEC-5…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account …
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.