945 matches found
CVE-2018-20948
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...
Authentication flaw
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...
CVE-2018-20948
CVE-2018-20948 affects cPanel before 68.0.27, where the cPanel Backup Restoration feature (SEC-383) enables a self XSS vulnerability. The issue stems from insufficient validation of client-side data in the WEB application, allowing an attacker to inject/execute script in the context of an authent...
CVE-2018-20948
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...
CVE-2018-20891
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...
CVE-2018-20891
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...
Design/Logic Flaw
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...
CVE-2018-20884
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...
CVE-2018-20884
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...
CVE-2018-20878
cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface SEC-441...
Design/Logic Flaw
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...
Design/Logic Flaw
cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface SEC-441...
CVE-2018-20891
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...
CVE-2018-20891
CVE-2018-20891 affects cPanel prior to 74.0.0, where File Restoration can perform arbitrary file-read operations. The vulnerability is triggered during File Restoration and is reported with a local attack vector and low complexity, with confidentiality impact listed as HIGH in CVSS. Some sources ...
CVE-2018-20884
CVE-2018-20884 affects cPanel before 74.0.0; it describes a stored XSS in the WHM File Restoration interface (SEC-367). The connected sources corroborate the same description across multiple feeds (Red Hat, CNVD, NVD mirrors, CVE lists). No exploitation details or explicit remediation are provide...
CVE-2018-20878
CVE-2018-20878 affects cPanel prior to 74.0.8, where a stored XSS vulnerability exists in the WHM “File and Directory Restoration” interface (SEC-441). The CNVD entry notes the issue stems from a lack of proper validation of client-side data in the WEB application. Connected records consistently ...
CVE-2019-4236
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List ACL entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to...
PT-2019-16984 · Hewlett Packard +2 · Hp-Ux +2
Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect version 7.1 Description: The issue affects the backup or archive operation of HP-UX VxFS objects. If an object has more than twelve Access Control List ACL entries, the IBM Spectrum Protect client silently skips these...