4118 matches found
CVE-2017-18416
cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update SEC-303...
CVE-2017-18406
cPanel before 67.9999.103 allows SQL injection during eximstats processing SEC-276...
CVE-2017-18406
cPanel before 67.9999.103 allows SQL injection during eximstats processing SEC-276...
CVE-2017-18405
cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic SEC-345...
CVE-2017-18411
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2017-18414
cPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html SEC-300...
CVE-2017-18397
cPanel before 68.0.15 does not preserve permissions for local backup transport SEC-330...
CVE-2017-18395
cPanel before 68.0.15 does not block a username of ssl SEC-328...
CVE-2017-18396
cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases SEC-329...
CVE-2017-18392
cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts SEC-325...
CVE-2017-18394
cPanel before 68.0.15 does not have a sufficient list of reserved usernames SEC-327...
CVE-2017-18394
cPanel before 68.0.15 does not have a sufficient list of reserved usernames SEC-327...
CVE-2017-18392
cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts SEC-325...
CVE-2017-18398
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains SEC-331...
CVE-2017-18400
cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...
CVE-2017-18399
cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer SEC-332...
CVE-2017-18393
cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail SEC-326...
CVE-2017-18402
cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade SEC-336...