4114 matches found
CVE-2017-18385
cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores SEC-311...
CVE-2017-18384
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...
CVE-2017-18384
CVE-2017-18384 affects cPanel prior to version 68.0.15, where jailed accounts can restore files that lie outside of their jail confinement (SEC-310). The connected Red Hat and CVE records reiterate the same description without additional technical specifics on root cause or affected components be...
CVE-2017-18383
CVE-2017-18383 affects cPanel prior to 68.0.15, where home-directory backups are written to an incorrect location (SEC-309). Connected advisories confirm the issue and reference the change log and disclosure posts. The vulnerability involves a misplacement of backup files rather than executable c...
CVE-2017-18383
cPanel before 68.0.15 writes home-directory backups to an incorrect location SEC-309...
CVE-2017-18382
CVE-2017-18382 affects cPanel prior to 68.0.15, where DNS zone SOA records can contain an unreserved email address (SEC-306). Root cause: the vulnerability arises from how the SOA RDATA handles the email field. Impact: CVSS3 base score 2.7 (LOW); confidentiality impact LOW, no integrity/availabil...
CVE-2017-18382
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...
CVE-2016-10826
cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests SEC-93...
CVE-2016-10820
cPanel before 55.9999.141 allows daemons to access their controlling TTYs SEC-31...
CVE-2016-10826
cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests SEC-93...
CVE-2016-10820
cPanel before 55.9999.141 allows daemons to access their controlling TTYs SEC-31...
CVE-2016-10821
In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list SEC-75...
CVE-2016-10821
In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list SEC-75...
CVE-2016-10818
cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup SEC-124...
CVE-2016-10817
cPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file SEC-123...
CVE-2016-10814
cPanel before 57.9999.54 allows demo-mode escape via showtemplate.stor SEC-119...
CVE-2016-10816
cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders SEC-121...
CVE-2016-10815
cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs SEC-120...