4118 matches found
CVE-2017-18404
cPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD SEC-341...
CVE-2017-18407
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download SEC-279...
CVE-2017-18409
In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases SEC-283...
CVE-2017-18403
cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives SEC-337...
CVE-2017-18407
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download SEC-279...
CVE-2017-18415
cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering SEC-302...
CVE-2017-18412
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
CVE-2017-18403
cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives SEC-337...
CVE-2017-18410
In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server SEC-284...
CVE-2017-18416
cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update SEC-303...
CVE-2017-18404
cPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD SEC-341...
CVE-2017-18409
In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases SEC-283...
CVE-2017-18410
In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server SEC-284...
CVE-2017-18405
cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic SEC-345...
CVE-2017-18411
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2017-18414
cPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html SEC-300...
CVE-2017-18415
cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering SEC-302...
CVE-2017-18408
cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces SEC-282...