708 matches found
PT-2019-7658
Name of the Vulnerable Software and Affected Versions Neet AirStream NAS version 1.1 Description The issue concerns a hardcoded password for the root account, which is set to ifconfig. This password cannot be changed through the configuration page, posing a security risk. Recommendations For Neet...
CVE-2017-18449
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
Code injection
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
Code injection
cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path SEC-225...
CVE-2017-18449
CVE-2017-18449 affects cPanel prior to 64.0.21. The issue enables certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254). The vulnerability is caused by insufficient validation of file rename actions within the specified script path,...
Code injection
cPanel before 64.0.21 allows code execution in the context of the root account via a SETVHOSTLANGPACKAGE multilang adminbin call SEC-237...
CVE-2017-18434
CVE-2017-18434 affects cPanel prior to 64.0.21. The vulnerability allows code execution in the root account context via a SET_VHOST_LANG_PACKAGE multilang adminbin call (SEC-237). The provided connected Red Hat/CNVD/EUVD/PRION/CVE records corroborate the same core issue and describe the root caus...
Code injection
cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups SEC-322...
CVE-2017-18390: Undefined Security Weakness
cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups SEC-322...
CVE-2017-18449: Improper Input Validation
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
PT-2019-8398
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.17 Description The issue allows code execution in the context of the root account via a long DocumentRoot path. Recommendations For versions prior to 62.0.17, update to version 62.0.17 or later to resolve the issu...
PT-2019-8325
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows code execution in the context of the root account due to weak permissions on incremental backups. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later t...
CVE-2017-18434: Improper Input Validation
cPanel before 64.0.21 allows code execution in the context of the root account via a SETVHOSTLANGPACKAGE multilang adminbin call SEC-237...
CVE-2017-18463: Improper Input Validation
cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path SEC-225...
PT-2019-8369
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 64.0.21 Description The issue allows code execution in the context of the root account via a SET VHOST LANG PACKAGE multilang adminbin call. Recommendations For versions prior to 64.0.21, update to version 64.0.21 or...
CVE-2016-10823
cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation SEC-89...
Sql injection
cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation SEC-89...
CVE-2016-10823
The vulnerability CVE-2016-10823 affects cPanel before 55.9999.141. The root cause is MakeText interpolation, enabling arbitrary code execution in the context of the root account. Documented in multiple sources (NVD, RH, PRION, CVE lists) with the same impact description. No explicit exploit deta...