CVE-2018-20951: Improper Neutralization of Input During Web Page Generation

cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...

CVE-2018-20950: Improper Neutralization of Input During Web Page Generation

cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...

CVE-2018-20949: Improper Neutralization of Input During Web Page Generation

cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...

CVE-2018-20934: Improperly Implemented Security Check for Standard

cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts SEC-411...

CVE-2018-20900: Improper Neutralization of Input During Web Page Generation

cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality SEC-399...

CVE-2018-20892: Undefined Security Weakness

cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...

CVE-2018-20882: Improper Input Validation

cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...

CVE-2018-20953: Improper Neutralization of Input During Web Page Generation

cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...

CVE-2016-10849: Improper Neutralization of Special Elements used in a Command

cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit SEC-82...

CVE-2018-20889: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 74.0.0 allows certain file-read operations via password file caching SEC-425...

CVE-2018-20876: Improper Neutralization of Input During Web Page Generation

cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface SEC-434...

CVE-2018-20948: Improper Neutralization of Input During Web Page Generation

cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...

CVE-2018-20891: Improper Input Validation

cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...

CVE-2018-20901: Improper Neutralization of Input During Web Page Generation

cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...

CVE-2018-20890: Improper Access Control

cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...

CVE-2018-20881: Improper Neutralization of Input During Web Page Generation

cPanel before 74.0.8 allows self stored XSS on the Security Questions login page SEC-446...

CVE-2018-20880: Undefined Security Weakness

cPanel before 74.0.8 mishandles account suspension because of an invalid emailaccounts.json file SEC-445...

CVE-2018-20877: Improper Neutralization of Input During Web Page Generation

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

CVE-2016-10840: Exposure of Resource to Wrong Sphere

cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...

CVE-2016-10843: Improper Neutralization of Special Elements used in a Command

cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...