4107 matches found
Design/Logic Flaw
cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...
Design/Logic Flaw
cPanel before 82.0.2 does not properly enforce Reseller package creation ACLs SEC-514...
Design/Logic Flaw
cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...
CVE-2019-14391
CVE-2019-14391: Affects cPanel prior to 82.0.2 where Reseller package creation ACLs are not properly enforced (SEC-514). Root cause is insufficient ACL enforcement; impact is privilege/permission concerns for reseller package creation. Affected versions: all before 82.0.2. Remediation: upgrade to...
CVE-2019-14391
cPanel before 82.0.2 does not properly enforce Reseller package creation ACLs SEC-514...
CVE-2019-14390
CVE-2019-14390 affects cPanel prior to 82.0.2, with a stored XSS in the WHM Modify Account interface (SEC-512). Impact described in sources: XSS within authenticated sessions; CVSS data from NVD lists base scores: CVSSv2 3.5 (LOW) and CVSSv3 5.4 (MEDIUM) . Remediation: upgrade to version 82.0.2 o...
CVE-2019-14390
cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...
CVE-2019-14389
cPanel before 82.0.2 allows local users to discover the MySQL root password SEC-510...
CVE-2019-14389
CVE-2019-14389 affects cPanel prior to 82.0.2 . The vulnerability allows local users to obtain the MySQL root password, i.e., an information disclosure (SEC-510). Reported details from multiple sources indicate the root cause is in cPanel versions before 82.0.2, with the impact described as discl...
CVE-2019-14388
CVE-2019-14388 affects cPanel prior to 82.0.2, allowing unauthenticated file creation due to mishandled Exim log parsing (SEC-507). Root cause: improper handling of Exim logs enables file creation without authentication. Impact: unauthorized file creation; no explicit exploitation details provide...
CVE-2019-14388
cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...
CVE-2019-14387
CVE-2019-14387 affects cPanel before 82.0.2, with a Self XSS vulnerability in the cPanel and webmail master templates (SEC-506). Root cause is client-side script execution via crafted input in template code. Impact, per CVSS data, is MEDIUM: network access with exploitation requiring user interac...
CVE-2019-14387
cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates SEC-506...
CVE-2019-14386
CVE-2019-14386 affects cPanel before 82.0.2, where a stored XSS vulnerability exists in the WHM Tomcat Manager interface (SEC-504). Impact is cross-site scripting; remediation is to upgrade to 82.0.2 or later (per provided sources). If exploitation details are not provided in the documents, note ...
CVE-2019-14386
cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...
FreeBSD : spamassassin -- multiple vulnerabilities (613193a0-c1b4-11e8-ae2d-54e1ad3d6335)
the Apache Spamassassin project reports : In Apache SpamAssassin, using HTML::Parser, we setup an object and hook into the begin and end tag event handlers In both cases, the 'open' event is immediately followed by a 'close' event - even if the tag does not close in the HTML being parsed. Because...
spamassassin -- multiple vulnerabilities
the Apache Spamassassin project reports: In Apache SpamAssassin, using HTML::Parser, we setup an object and hook into the begin and end tag event handlers In both cases, the "open" event is immediately followed by a "close" event - even if the tag does not close in the HTML being parsed. Because ...
Cross site scripting
cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering...
