5637 matches found
PT-2019-8399
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.17 Description The issue allows arbitrary file-overwrite operations. This is possible via the WHM Zone Template editor. Recommendations For versions prior to 62.0.17, update to version 62.0.17 or later to resolve...
CVE-2017-18398
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains SEC-331...
CVE-2017-18398
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains SEC-331...
CVE-2017-18382
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...
CVE-2017-18398
The CVE-2017-18398 entry refers to cPanel's DnsUtils prior to version 68.0.15, where zone creation is possible for hostname and account subdomains (SEC-331). This is documented across multiple connected sources (RH/CVE, NVD, CNVD/CNVD-2019-36129) indicating a vulnerability in the DNS management u...
CVE-2017-18398
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains SEC-331...
CVE-2017-18382
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...
CVE-2017-18382: Improper Input Validation
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...
CVE-2017-18398: Improper Input Validation
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains SEC-331...
PT-2019-8317
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows the use of an unreserved e-mail address in DNS zone SOA records. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the issue...
PT-2019-8333
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows zone creation for hostname and account subdomains. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the issue...
CVE-2018-20946
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
CVE-2018-20946
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
CVE-2018-20935
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...
CVE-2018-20933
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action SEC-410...
CVE-2018-20935
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...
CVE-2018-20933
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action SEC-410...