CVE-2019-14403: URL Redirection to Untrusted Site

cPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing SEC-483...

CVE-2019-14390: Improper Neutralization of Input During Web Page Generation

cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...

CVE-2019-14411: Undefined Security Weakness

cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI SEC-473...

CVE-2019-14408: Undefined Security Weakness

cPanel before 78.0.2 allows a demo account to link with an OpenID provider SEC-460...

CVE-2019-14407: Undefined Security Weakness

cPanel before 78.0.2 reveals internal data to OpenID providers SEC-415...

CVE-2019-14406: Improper Neutralization of Input During Web Page Generation

cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing SEC-493...

CVE-2019-14396: Undefined Security Weakness

API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data SEC-495...

CVE-2019-14395: Incorrect Permission Assignment for Critical Resource

cPanel before 80.0.5 uses world-readable permissions for the Queueprocd log SEC-494...

CVE-2019-14393: Undefined Security Weakness

cPanel before 80.0.5 allows local code execution in the context of a different cPanel account because of insecure cpphp execution SEC-486...

CVE-2019-14386: Improper Neutralization of Input During Web Page Generation

cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...

CVE-2019-14400: Undefined Security Weakness

cPanel before 78.0.18 allows local users to escalate to root access because of userdata cache misparsing SEC-479...

CVE-2019-14414: Undefined Security Weakness

In cPanel before 78.0.2, a Userdata cache temporary file can conflict with domains SEC-478...

CVE-2019-14397: Undefined Security Weakness

cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call SEC-496...

CVE-2018-20870: Exposure of Sensitive Information to an Unauthorized Actor

The WebDAV transport feature in cPanel before 76.0.8 enables debug logging SEC-467...

CVE-2019-14413: Undefined Security Weakness

cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets SEC-476...

CVE-2018-20863: Improper Input Validation

cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments SEC-452...

Thunderbird ESR < 60.7.XXX - Type Confusion Vulnerability

Type confusion in Thunderbird ============================= Severity Rating: Medium Confirmed Affected Versions: All versions affected Confirmed Patched Versions: Thunderbird ESR 60.7.XXX Vendor: Thunderbird Vendor URL: https://www.thunderbird.net/ Vendor Reference:...

Thunderbird ESR < 60.7.XXX - icalmemorystrdupanddequote Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in Thunderbird ========================================= Severity Rating: High Confirmed Affected Versions: All versions affected Confirmed Patched Versions: Thunderbird ESR 60.7.XXX Vendor: Thunderbird Vendor URL: https://www.thunderbird.net/ Vendor Reference:...

Thunderbird ESR < 60.7.XXX - parser_get_next_char Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in Thunderbird ========================================= Severity Rating: High Confirmed Affected Versions: All versions affected Confirmed Patched Versions: Thunderbird ESR 60.7.XXX Vendor: Thunderbird Vendor URL: https://www.thunderbird.net/ Vendor Reference:...

Thunderbird ESR < 60.7.XXX - icalrecur_add_bydayrules Stack-Based Buffer Overflow Vulnerability

Stack-based buffer overflow in Thunderbird ========================================== Severity Rating: High Confirmed Affected Versions: All versions affected Confirmed Patched Versions: Thunderbird ESR 60.7.XXX Vendor: Thunderbird Vendor URL: https://www.thunderbird.net/ Vendor Reference:...