CVE-2019-14390: Improper Neutralization of Input During Web Page Generation

cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...

CVE-2019-14403: URL Redirection to Untrusted Site

cPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing SEC-483...

CVE-2019-14393: Undefined Security Weakness

cPanel before 80.0.5 allows local code execution in the context of a different cPanel account because of insecure cpphp execution SEC-486...

CVE-2019-14386: Improper Neutralization of Input During Web Page Generation

cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...

CVE-2018-20870: Exposure of Sensitive Information to an Unauthorized Actor

The WebDAV transport feature in cPanel before 76.0.8 enables debug logging SEC-467...

CVE-2018-20863: Improper Input Validation

cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments SEC-452...

CVE-2019-14414: Undefined Security Weakness

In cPanel before 78.0.2, a Userdata cache temporary file can conflict with domains SEC-478...

CVE-2018-20868: Improper Neutralization of Input During Web Page Generation

cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface SEC-464...

CVE-2019-14413: Undefined Security Weakness

cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets SEC-476...

CVE-2019-14409: Undefined Security Weakness

cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...

CVE-2018-20862: Undefined Security Weakness

cPanel before 76.0.8 unsafely performs PostgreSQL password changes SEC-366...

CVE-2019-14412: Use of Externally-Controlled Format String

Maketext in cPanel before 78.0.2 allows format-string injection in the DCV checkdomainsviadns UAPI SEC-474...

CVE-2019-14411: Undefined Security Weakness

cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI SEC-473...

CVE-2019-14407: Undefined Security Weakness

cPanel before 78.0.2 reveals internal data to OpenID providers SEC-415...

CVE-2019-14406: Improper Neutralization of Input During Web Page Generation

cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing SEC-493...

CVE-2019-14397: Undefined Security Weakness

cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call SEC-496...

CVE-2019-14408: Undefined Security Weakness

cPanel before 78.0.2 allows a demo account to link with an OpenID provider SEC-460...

PT-2019-8987

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCS404, QCS605, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD...

Thunderbird ESR < 60.7.XXX - icalmemorystrdupanddequote Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in Thunderbird ========================================= Severity Rating: High Confirmed Affected Versions: All versions affected Confirmed Patched Versions: Thunderbird ESR 60.7.XXX Vendor: Thunderbird Vendor URL: https://www.thunderbird.net/ Vendor Reference:...

Thunderbird ESR < 60.7.XXX - icalrecur_add_bydayrules Stack-Based Buffer Overflow Vulnerability

Stack-based buffer overflow in Thunderbird ========================================== Severity Rating: High Confirmed Affected Versions: All versions affected Confirmed Patched Versions: Thunderbird ESR 60.7.XXX Vendor: Thunderbird Vendor URL: https://www.thunderbird.net/ Vendor Reference:...