1796 matches found
CVE-2019-1232: Undefined Security Weakness
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'...
Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2015 Update 3: September 10, 2019
None None...
Windows Data Sharing Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafte...
PT-2019-3204
Name of the Vulnerable Software and Affected Versions Diagnostics Hub Standard Collector Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability. It occurs when the Diagnostics Hub Standard Collector Service improperly impersonates certa...
August 13, 2019—KB4512518 (Monthly Rollup)
None None...
Design/Logic Flaw
cPanel before 60.0.25 allows file-create and file-chmod operations during ModSecurity Audit logfile processing SEC-165...
CVE-2017-18418
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations SEC-265...
CVE-2017-18418
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations SEC-265...
Cross site scripting
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations SEC-265...
CVE-2017-18418
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations SEC-265...
CVE-2017-18418
CVE-2017-18418 affects cPanel before 66.0.2, enabling stored XSS during WHM cPAddons file operations (SEC-265). The vulnerability is tied to versions prior to 66.0.2; remediation involves upgrading to 66.0.2 or later (per changelogs/references in the connected documents). Exploitation details are...
CVE-2017-18388
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask SEC-315...
Code injection
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask SEC-315...
CVE-2017-18388
The CVE-2017-18388 entry concerns cPanel before 68.0.15 where unsafe file operations occur because Jailshell does not set the umask (SEC-315). Affected component: cPanel’s Jailshell. Root cause: missing umask handling in Jailshell leads to insecure file permissions during file operations. Impact ...
CVE-2017-18388
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask SEC-315...
CVE-2017-18388: Improper Input Validation
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask SEC-315...
PT-2019-8323
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows cPanel to perform unsafe file operations due to Jailshell not setting the umask. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the iss...
CVE-2018-20945
bin/csvprocess in cPanel before 68.0.27 allows insecure file operations SEC-354...