2140 matches found
CVE-2019-14725
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail usage value of a victim account via an attacker account...
Design/Logic Flaw
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail password of a victim account via an attacker account...
CVE-2019-14728
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to add an e-mail forwarding destination to a victim's account via an attacker account...
CVE-2019-14722
CVE-2019-14722 affects CentOS Web Panel 0.9.8.851. The vulnerability is an insecure object reference in the email forwarding management that allows an attacker with an attacker account to delete an email forwarding destination belonging to a victim’s account. The connected documents confirm the a...
CVE-2019-14722
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete an e-mail forwarding destination from a victim's account via an attacker account...
Roundcube Webmail < 1.2.0 XSS Vulnerability
Roundcube Webmail is prone to a cross-site scripting XSS vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
PT-2019-8414
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.4 Description The issue concerns the generation of WHM SSL certificates, which uses an unreserved e-mail address. Recommendations For versions prior to 62.0.4, update to version 62.0.4 or later to resolve the issu...
[ASA-201908-4] exim: arbitrary code execution
Arch Linux Security Advisory ASA-201908-4 ========================================= Severity: Critical Date : 2019-08-05 CVE-ID : CVE-2019-13917 Package : exim Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1011 Summary ======= The package exim before versi...
CVE-2017-18382
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...
CVE-2017-18393
CVE-2017-18393 affects cPanel prior to 68.0.15. The issue is that the system does not block a username of postmaster, which could allow reception of private email. This is the core vulnerability described in multiple connected records (including RH/CVE-2017-18393 and NVD entry). Practical impact:...
CVE-2017-18393: Improper Input Validation
cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail SEC-326...
PT-2019-8317
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows the use of an unreserved e-mail address in DNS zone SOA records. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the issue...
CVE-2018-20898
CVE-2018-20898 affects cPanel before 71.9980.37, where e-mail injection is possible during cPAddons moderation (SEC-396). Multiple connected records (NVD, Red Hat, PRION) corroborate the vendor-facing nature of the issue and the same description. The available documents do not provide exploit cod...
PT-2019-10328
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 71.9980.37 Description: The issue allows e-mail injection during cPAddons moderation. Recommendations: For versions prior to 71.9980.37, update to version 71.9980.37 or later to resolve the issue...
PT-2019-10368
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue concerns the application of e-mail account suspensions to unowned accounts. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...
CVE-2018-20934: Improperly Implemented Security Check for Standard
cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts SEC-411...
CVE-2018-20898: Improper Neutralization of Special Elements in Output Used by a Downstream Component
cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...
PT-2019-7653
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.54.0.0 Description The issue allows for a bypass of the e-mail sending limit. Recommendations For versions prior to 11.54.0.0, update to version 11.54.0.0 or later to resolve the issue...