cPanel Cross-Site Scripting Vulnerability (CNVD-2020-55178)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 88.0.13, which stems from allowing SELF XSS via the DNSSE...

CVE-2020-26111

cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface SEC-566...

CVE-2020-26110

cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces SEC-564...

Design/Logic Flaw

cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces SEC-564...

Design/Logic Flaw

cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface SEC-566...

CVE-2020-26110

cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces SEC-564...

CVE-2020-26111

CVE-2020-26111 affects cPanel prior to 90.0.10. The vulnerability is a self XSS in the WHM Edit DNS Zone interface (SEC-566). Impact described as partial integrity risk with low confidentiality/low integrity and no availability impact in CVSS 3.1 (base score 6.1; UI required; network vector; chan...

CVE-2020-26111

cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface SEC-566...

CVE-2020-26110: Improper Neutralization of Input During Web Page Generation

cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces SEC-564...

CVE-2020-26111: Improper Neutralization of Input During Web Page Generation

cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface SEC-566...

PT-2020-16293

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.13 Description The issue allows for self XSS via DNS Zone Manager DNSSEC interfaces. Recommendations For versions prior to 88.0.13, update to version 88.0.13 or later to resolve the issue...

PT-2020-16294

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 90.0.10 Description The issue allows self XSS via the WHM Edit DNS Zone interface. Recommendations For versions prior to 90.0.10, update to version 90.0.10 or later to resolve the issue...

CVE-2020-3421

Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. The vulnerabilities are due to incomplete handling of Layer 4 packets through the...

CVE-2020-3421

Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. The vulnerabilities are due to incomplete handling of Layer 4 packets through the...

Design/Logic Flaw

Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. The vulnerabilities are due to incomplete handling of Layer 4 packets through the...

Design/Logic Flaw

Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. The vulnerabilities are due to incomplete handling of Layer 4 packets through the...

CVE-2020-3421 Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities

Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. The vulnerabilities are due to incomplete handling of Layer 4 packets through the...

CVE-2020-3421 Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities

Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. The vulnerabilities are due to incomplete handling of Layer 4 packets through the...

CVE-2020-3421

The CVE-2020-3421 entry concerns Cisco IOS XE Software Zone-Based Firewall vulnerabilities. Affected component: Zone-Based Firewall handling of Layer 4 traffic on Cisco IOS XE. Root cause: incomplete handling of Layer 4 packets through the device, enabling an unauthenticated, remote attacker to c...

CVE-2020-3480 Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities

Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. The vulnerabilities are due to incomplete handling of Layer 4 packets through the...