708 matches found
CVE-2018-20882
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...
CVE-2018-20888
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication SEC-424...
CVE-2018-20882
CVE-2018-20882 affects cPanel prior to 74.0.8, enabling arbitrary file-write under the root context during WHM Force Password Change (SEC-447). This is a local-attack vector impacting systems running affected cPanel versions. The vulnerability arises in the root context during the password-change...
CVE-2018-20882: Improper Input Validation
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...
CVE-2018-20888: Improper Authentication
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication SEC-424...
PT-2019-7619
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 55.9999.141 Description The issue allows arbitrary code execution in the context of the root account due to MakeText interpolation. Recommendations For versions prior to 55.9999.141, update to version 55.9999.141 or...
PT-2019-10311
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.8 Description: The issue allows arbitrary file-write operations in the context of the root account during WHM Force Password Change. Recommendations: For versions prior to 74.0.8, update to version 74.0.8 or late...
PT-2019-10317
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.0 Description: The issue allows file modification in the context of the root account due to incorrect HTTP authentication. Recommendations: For versions prior to 74.0.0, update to version 74.0.0 or later to resol...
CVE-2019-14404
cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...
CVE-2019-14399
The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...
CVE-2018-20869
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...
Design/Logic Flaw
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...
Design/Logic Flaw
The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...
Code injection
cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetchsslcertificatesforfqdns API SEC-489...
CVE-2018-20869
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...
CVE-2019-14404
cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...
CVE-2019-14399
The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...
CVE-2019-14394
CVE-2019-14394 affects cPanel prior to 80.0.5 where the fetch_ssl_certificates_for_fqdns API can perform unsafe file operations in the context of the root account. Multiple connected sources confirm this vulnerability exists in cPanel and describes an unsafe file operation flaw exploitable locall...
PT-2019-13663
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 80.0.5 Description The issue allows for unsafe file operations in the context of the root account. This is achieved via the "fetch ssl certificates for fqdns" API endpoint. Recommendations For versions prior to 80.0.5,...