11005 matches found
cPanel Information Disclosure Vulnerability (CNVD-2019-26346)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions prior to cPanel 64.0.21. An attacker can exploit the vulnerability to...
cPanel Code Execution Vulnerability (CNVD-2019-26336)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code execution vulnerability exists in versions of cPanel prior to 64.0.21. An attacker exploited the vulnerability to execute...
cPanel Code Execution Vulnerability (CNVD-2019-26335)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code execution vulnerability exists in versions of cPanel prior to 64.0.21. An attacker can exploit the vulnerability to execut...
Schism Tracker Integer Overflow Vulnerability
Schism Tracker is an open source music composition tool. An integer overflow vulnerability exists in Schism Tracker 20190722 and prior versions. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in...
EspoCRM Cross-Site Scripting Vulnerability (CNVD-2019-30786)
EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. A cross-site scripting vulnerability exists in EspoCRM versions prior to 5.6.9, which can be exploited by an attacker to execute...
EspoCRM Cross-Site Scripting Vulnerability (CNVD-2020-16551)
EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. A cross-site scripting vulnerability exists in EspoCRM versions prior to 5.6.9. The vulnerability stems from the lack of proper...
cPanel cross-site scripting vulnerability (CNVD-2019-26003)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM cPAddons installation interface in versions prior to cPanel 62.0.24. The...
cPanel Code Execution Vulnerability (CNVD-2019-26350)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 62.0.17. An attacker can exploit the vulnerability to execute arbitra...
cPanel cross-site scripting vulnerability (CNVD-2019-26347)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM cPAddons showsecurity interface in versions prior to cPanel...
EspoCRM Cross-Site Scripting Vulnerability (CNVD-2019-30788)
EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. A cross-site scripting vulnerability exists in EspoCRM versions prior to 5.6.9, which can be exploited by an attacker to execute...
cPanel Information Disclosure Vulnerability (CNVD-2019-26211)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 66.0.2. The vulnerability stems from an error such ...
cPanel cross-site scripting vulnerability (CNVD-2019-26353)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...
Misskey Cross-Site Scripting Vulnerability
Misskey is a micro-blogging platform. A cross-site scripting vulnerability exists in versions of Misskey prior to 10.102.4 that can be exploited by an attacker to hijack user tokens...
cPanel SQL Injection Vulnerability (CNVD-2019-26351)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A SQL injection vulnerability exists in bin/hordeupdateusernames in cPanel versions prior to 11.54.0.4. The vulnerability stems...
CVE-2019-7899
Names of disabled downloadable products could be disclosed due to inadequate validation of user input in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...
CVE-2019-7909
A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with...
Google Chrome Blink Resource Management Error Vulnerability (CNVD-2019-29143)
Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A resource management error vulnerability exists in Blink in versions of Google Chrome prior to 76.0.3809.132. A remote attacker...
CVE-2018-20931
cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page SEC-405...