CVE-2017-18384: Improper Access Control

cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...

PT-2019-8319

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows jailed accounts to restore files that are outside of the jail. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the issue...

CVE-2018-20891

cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...

CVE-2018-20891

cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...

Design/Logic Flaw

cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...

CVE-2018-20884

cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...

CVE-2018-20884

cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...

Design/Logic Flaw

cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...

CVE-2018-20891

cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...

CVE-2018-20891

CVE-2018-20891 affects cPanel prior to 74.0.0, where File Restoration can perform arbitrary file-read operations. The vulnerability is triggered during File Restoration and is reported with a local attack vector and low complexity, with confidentiality impact listed as HIGH in CVSS. Some sources ...

CVE-2018-20884

CVE-2018-20884 affects cPanel before 74.0.0; it describes a stored XSS in the WHM File Restoration interface (SEC-367). The connected sources corroborate the same description across multiple feeds (Red Hat, CNVD, NVD mirrors, CVE lists). No exploitation details or explicit remediation are provide...

PT-2019-10313

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.0 Description: The issue allows for stored XSS in the WHM File Restoration interface. Recommendations: For versions prior to 74.0.0, update to version 74.0.0 or later to resolve the issue...

PT-2019-10321

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.0 Description: The issue allows arbitrary file-read operations during File Restoration. Recommendations: For versions prior to 74.0.0, update to version 74.0.0 or later to resolve the issue...

CVE-2018-20891: Improper Input Validation

cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...

CVE-2018-20884: Improper Neutralization of Input During Web Page Generation

cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...

CVE-2019-4093

IBM Spectrum Protect (formerly Tivoli Storage Manager) Backup-Archive Client Web UI on Windows (version 8.1.7) is affected by CVE-2019-4093, caused by incorrect file permissions that could allow a user to restore files and directories they should not access. IBM’s security bulletin lists a CVSS v...

PT-2019-16894

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager IBM Spectrum Protect version 8.1.7 Description The issue allows a user to restore files and directories using the IBM Spectrum Protect Client Web User Interface on Windows that they should not have access to due to...

PT-2017-2284

Name of the Vulnerable Software and Affected Versions Antivirus Kaspersky 8.0 for Linux File Servers Description The issue is related to insecure privilege management in the web console of Antivirus Kaspersky 8.0 for Linux File Servers. An attacker with non-privileged user rights, specifically th...

Adobe eBook Reader 2.2 File Restoration Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5273/info Adobe eBook Reader is a client side application which is able to view Adobe eBooks, available for Microsoft Windows and Macintosh OS 9. eBooks are electronic books which provide some protection for content. User...

DeepFreeze freezing principle-vulnerability warning-the black bar safety net

DeepFreeze freezing point principle The freezing point of the Restore is to get the South Bridge chip of the I0 control, it is control the hard disk of the INT13 interrupt, almost all of the reduction software are relying on this implementation, when loaded right after driving,the freezing point...