1848 matches found
CVE-2017-18458
cPanel before 62.0.17 allows file overwrite when renaming an account SEC-219...
Code injection
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
Design/Logic Flaw
cPanel before 64.0.21 does not preserve supplemental groups across account renames SEC-260...
Design/Logic Flaw
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18461
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18461
CVE‑2017‑18461 affects cPanel prior to 62.0.17, where security policy questions are not preserved across an account rename (SEC‑223). The NVD entry lists CVSS‑v3 base 4.3 (NETWORK, HIGH? actually LOW; see vector) and CVSS‑v2 base 5.0, with impact: integrity Low, otherwise None; exploitability low...
CVE-2017-18453
CVE-2017-18453 affects cPanel prior to 64.0.21. The issue is that supplemental groups are not preserved across account renames, as described in the SEC-260 entry. The connected sources consistently identify this as a behavior/version issue rather than a component-level defect with documented expl...
CVE-2017-18449
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
CVE-2017-18449
CVE-2017-18449 affects cPanel prior to 64.0.21. The issue enables certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254). The vulnerability is caused by insufficient validation of file rename actions within the specified script path,...
CVE-2017-18412
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
Design/Logic Flaw
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
CVE-2017-18412
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
CVE-2017-18412
CVE-2017-18412 affects cPanel before 67.9999.103, where mishandling during an account rename allows Apache HTTP Server log files to become world-readable (information disclosure). Root cause: improper access control on log files. Impact is limited to partial confidentiality breach as described; n...
CVE-2018-20937
cPanel before 68.0.27 does not validate database and dbuser names during renames SEC-321...
CVE-2018-20893
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
CVE-2018-20893
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
Design/Logic Flaw
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
CVE-2018-20893
Affected software: cPanel. Vulnerability: core issue allows file-rename operations during account renames (SEC-442) prior to version 74.0.0. Root cause details are not expanded beyond this description in the provided documents. Impact: exposes unintended file-rename behavior during account rename...
CVE-2018-20893
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
Avast Antivirus Local Denial of Service Vulnerability
Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in Avast Antivirus versions prior to 19.4. The vulnerability can be exploited to bypass the Avast self-protection mechanism and rename important binary files e.g. AvastSvc.exe file,...