4108 matches found
CVE-2016-10858
CVE-2016-10858 affects cPanel before 11.54.0.0, allowing unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64). Data: multiple sources confirm impact on the cPanel product; remediation indicated is upgrading to 11.54.0.0 or later. Exploitation details and in-the-wild status...
CVE-2016-10858
cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-64...
CVE-2016-10859
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands SEC-65...
CVE-2016-10859
CVE-2016-10859 affects cPanel before 11.54.0.0. The issue allows unauthorized password changes through Webmail API commands (SEC-65). Root cause details are not expanded beyond the description in the provided documents. Exploitation status and concrete remediation steps are not specified in the c...
CVE-2016-10860
CVE-2016-10860 affects cPanel before 11.54.0.0 and is documented as allowing unauthorized zone modification through the WHM API (SEC-66). The vulnerability is corroborated across multiple sources in the connected documents (NVD entry and Red Hat advisory), which state the same affected software a...
CVE-2016-10860
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
CVE-2015-9291
CVE-2015-9291 affects cPanel prior to 11.52.0.13, where the get_information_for_applications path could be abused to read arbitrary files. The root cause is that the system does not prevent such file reads, enabling exposure of potentially sensitive information via CPANEL-1221. The connected Red ...
CVE-2015-9291
cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via getinformationforapplications CPANEL-1221...
CVE-2018-20910
The CVE-2018-20910 entry concerns cPanel before 70.0.23, where the WHM cPAddons showsecurity interface is vulnerable to self-XSS. The issue stems from insufficient validation of client-side data, enabling an attacker to execute client-side code in affected versions. Public references indicate the...
CVE-2018-20910
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
CVE-2018-20909
cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups SEC-338...
CVE-2018-20909
CVE-2018-20909 affects cPanel prior to 70.0.23, where arbitrary file-chmod operations can occur during legacy incremental backups (SEC-338). Multiple sources (NVD, Red Hat advisory, CNVD) confirm the issue and link it to cPanel’s backup handling. The vulnerability arises in the backup process, en...
CVE-2018-20908
cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling SEC-435...
CVE-2018-20908
CVE-2018-20908 affects cPanel before 71.9980.37 and enables arbitrary file-read during pkgacct custom template handling (SEC-435). Multiple sources (NVD, Red Hat, CNVD, CVE lists) confirm the issue. The exploitation status and exact remediation are not provided in the connected documents; the cor...
CVE-2018-20907
cPanel before 71.9980.37 does not enforce the Mime::listhotlinks API feature restriction SEC-432...
CVE-2018-20907
CVE-2018-20907 affects cPanel prior to 71.9980.37, where the Mime::list_hotlinks API feature restriction (SEC-432) is not enforced. Multiple feeds (NVD, Red Hat, CVE CVE-2018-20907 entries) independently report that specific version range is vulnerable due to this ignore of the feature restrictio...
CVE-2018-20906
cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction SEC-430...
CVE-2018-20906
CVE-2018-20906 affects cPanel before 71.9980.37. The issue allows attackers to make API calls that bypass the images feature restriction (SEC-430). The connected documents confirm the product (cPanel), affected version range (before 71.9980.37), and the described impact (bypassing images feature ...
CVE-2018-20905
CVE-2018-20905 affects cPanel prior to 71.9980.37, where an attacker can issue API calls that bypass the backup feature restriction (SEC-429). The CVE entry is documented across multiple sources (including Red Hat and CNVD/CVE listings) with the same impact description. The available references d...