CVE-2016-10836

CVE-2016-10836 affects cPanel prior to version 55.9999.141. The vulnerability allows arbitrary file-read operations during authentication with CalDAV. The issue is confirmed in multiple sources (NVD entry and Red Hat/CVE pages). Affected software: cPanel before 55.9999.141. Root cause: improper f...

CVE-2016-10838

CVE-2016-10838 affects cPanel prior to 11.54.0.4, where the bin/fmq script allows arbitrary file-read operations. Root cause is a vulnerability in the bin/fmq routine enabling access to files that should be restricted. The impact is confidentiality loss (C of CVSS) with no listed impact to integr...

CVE-2018-20924

CVE-2018-20924 affects cPanel before 70.0.23, allowing arbitrary file-read and file-unlink via WHM style uploads (SEC-378). The issue concerns the vends/product: cPanel; vulnerable component/behavior: file access operations triggered by WHM uploads; root cause not explicitly detailed in the provi...

CVE-2018-20908

cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling SEC-435...

CVE-2018-20908

cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling SEC-435...

Design/Logic Flaw

cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via getinformationforapplications CPANEL-1221...

CVE-2015-9291

cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via getinformationforapplications CPANEL-1221...

CVE-2018-20908

CVE-2018-20908 affects cPanel before 71.9980.37 and enables arbitrary file-read during pkgacct custom template handling (SEC-435). Multiple sources (NVD, Red Hat, CNVD, CVE lists) confirm the issue. The exploitation status and exact remediation are not provided in the connected documents; the cor...

CVE-2018-20891

cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...

CVE-2018-20891

cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...

Design/Logic Flaw

cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...

CVE-2018-20891

cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...

Arbitrary File Read

Overview html-pdf before version 3.0.1 is vulnerable to Arbitrary File Read. The package fails to sanitize the HTML input, allowing attackers to exfiltrate server files by supplying malicious HTML code. XHR requests in the HTML code are executed by the server. Input with an XHR request such as...

CVE-2019-14409

cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...

CVE-2019-14409

cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...

Design/Logic Flaw

cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...

CVE-2019-14409

cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...

ZZZCMS V1.7.1 version exists arbitrary file reading vulnerability

ZZZCMS enterprise station system using PHP + MYSQL language development, is a set of mature and perfect enterprise station CMS system, the cover is fully functional, customization of powerful, scalable, high security, can easily solve most of the enterprise station needs. ZZZCMS V1.7.1 version of...

EulerOS 2.0 SP8 : libvirt (EulerOS-SA-2019-1774)

According to the versions of the libvirt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API CVE-2019-10161 - libvirt: virDomainManagedSaveDefineXML API exposed to...

Arbitrary File Read Vulnerability in Jinweixin Immunization Planning Information Management System

The Immunization Planning Information Management System IPIMS is used to process immunization planning information. An arbitrary file read vulnerability exists in the Jinweixin Immunization Planning Information Management System. An attacker could exploit this vulnerability to obtain sensitive...