552 matches found
CVE-2016-10823
The vulnerability CVE-2016-10823 affects cPanel before 55.9999.141. The root cause is MakeText interpolation, enabling arbitrary code execution in the context of the root account. Documented in multiple sources (NVD, RH, PRION, CVE lists) with the same impact description. No explicit exploit deta...
CVE-2018-20888
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication SEC-424...
Authentication flaw
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication SEC-424...
CVE-2018-20882
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...
CVE-2018-20888
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication SEC-424...
CVE-2018-20882
CVE-2018-20882 affects cPanel prior to 74.0.8, enabling arbitrary file-write under the root context during WHM Force Password Change (SEC-447). This is a local-attack vector impacting systems running affected cPanel versions. The vulnerability arises in the root context during the password-change...
CVE-2019-14399
The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...
CVE-2019-14404
cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...
CVE-2018-20869
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...
Code injection
cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetchsslcertificatesforfqdns API SEC-489...
Design/Logic Flaw
The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...
Design/Logic Flaw
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...
CVE-2018-20869
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...
CVE-2019-14404
cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...
CVE-2019-14399
The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...
CVE-2019-14394
CVE-2019-14394 affects cPanel prior to 80.0.5 where the fetch_ssl_certificates_for_fqdns API can perform unsafe file operations in the context of the root account. Multiple connected sources confirm this vulnerability exists in cPanel and describes an unsafe file operation flaw exploitable locall...
The vulnerability of the Alpine Linux Docker distribution, related to the use of a empty password for the pre-installed account, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Alpine Linux Docker distribution stems from the use of a empty password for the pre-installed root account. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Unpassworded (Blank Password) 'root' Account (SSH)
The remote host has set no password for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unpassworded (Blank Password) 'root' Account (Telnet)
The remote host has set no password for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
