Lucene search
+L

4088 matches found

NVD
NVD
added 2025/02/27 11:15 p.m.14 views

CVE-2025-24832

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892, Acronis Backup extension f...

5.5CVSS0.00193EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/27 11:00 p.m.5 views

CVE-2025-24832

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892, Acronis Backup extension f...

5.5CVSS5.6AI score0.00193EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/27 11:00 p.m.23 views

CVE-2025-24832

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892, Acronis Backup extension f...

5.5CVSS0.00193EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/07 9:48 a.m.8 views

CVE-2025-22690

Cross-Site Request Forgery CSRF vulnerability in DigiTimber DigiTimber cPanel Integration digitimber-cpanel-integration allows Stored XSS.This issue affects DigiTimber cPanel Integration: from n/a through = 1.4.6...

7.1CVSS7.2AI score0.0017EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 2:57 p.m.23 views

CVE-2020-15432

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxmigrationcpanel.php. When parsing the filespace parameter, the...

10CVSS7.3AI score0.08083EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/04 10:27 p.m.9 views

CVE-2024-8767

Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 619, Acronis Backup extension for Plesk Linux before build 555, Acronis Backup plugin for DirectAdmin Linux before...

9.9CVSS6.9AI score0.00476EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/03 3:15 p.m.6 views

CVE-2025-22690

Cross-Site Request Forgery CSRF vulnerability in DigiTimber DigiTimber cPanel Integration digitimber-cpanel-integration allows Stored XSS.This issue affects DigiTimber cPanel Integration: from n/a through = 1.4.6...

7.1CVSS0.0017EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/03 2:23 p.m.7 views

CVE-2025-22690 WordPress DigiTimber cPanel Integration plugin <= 1.4.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in DigiTimber DigiTimber cPanel Integration digitimber-cpanel-integration allows Stored XSS.This issue affects DigiTimber cPanel Integration: from n/a through = 1.4.6...

7.1CVSS7.2AI score0.0017EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/03 12:00 a.m.7 views

WordPress plugin DigiTimber cPanel Integration 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

7.1CVSS8.7AI score0.0017EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/03 12:00 a.m.8 views

PT-2025-4626 · Unknown · Digitimber Cpanel Integration

Name of the Vulnerable Software and Affected Versions: DigiTimber cPanel Integration versions 1.4.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...

7.1CVSS9.1AI score0.0017EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/01/31 3:46 p.m.8 views

WordPress DigiTimber cPanel Integration plugin <= 1.4.6 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin DigiTimber cPanel Integration versions = 1.4.6...

7.1CVSS6.2AI score0.0017EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:00 a.m.13 views

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers targets programming environments such as cPanel & WHM, Plesk, and DirectAdmin, running on Linux operating systems. This vulnerability allows attackers to gain increased privileges.

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers, as well as for cPanel & WHM, Plesk, and DirectAdmin operating systems on Linux, is related to errors in link processing. Exploiting this vulnerability allows a malicious actor to...

5.5CVSS5.9AI score0.00197EPSS
SaveExploits0References4
NVD
NVD
added 2024/11/11 2:15 p.m.18 views

CVE-2024-34014

Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892, Acronis Backup extension for Plesk Linux...

5.5CVSS0.00197EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/11 2:15 p.m.20 views

CVE-2024-34015

Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892...

3.3CVSS0.00205EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/11 1:21 p.m.12 views

CVE-2024-34015

Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892...

3.3CVSS3.8AI score0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/11 1:21 p.m.20 views

CVE-2024-34015

Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892...

3.3CVSS0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/11 1:20 p.m.52 views

CVE-2024-34014

CVE-2024-34014 affects Acronis Backup plugin for cPanel & WHM (Linux) prior to builds 1.8.3.818 and 1.9.1.892, Acronis Backup extension for Plesk prior to 1.8.6.599, and Acronis Backup plugin for DirectAdmin prior to 1.2.2.181. The vulnerability is an arbitrary file overwrite during recovery caus...

5.5CVSS5.5AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/11 1:20 p.m.26 views

CVE-2024-34014

Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892, Acronis Backup extension for Plesk Linux...

5.5CVSS0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/11 12:00 a.m.8 views

Acronis多款产品 安全漏洞

Acronis Backup plugin for cPanel & WHM Linux, etc. is a plugin from Acronis Switzerland. A security vulnerability exists in various Acronis products that stems from improper handling of symbolic links, resulting in arbitrary file overwrites during recovery. The following products and versions are...

5.5CVSS5.6AI score0.00197EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/11/11 12:00 a.m.10 views

PT-2024-25641 · Acronis · Acronis Backup Plugin For Cpanel & Whm

Name of the Vulnerable Software and Affected Versions: Acronis Backup plugin for cPanel & WHM Linux versions prior to build 818 Description: The issue is related to sensitive information disclosure during file browsing due to improper symbolic link handling. This can lead to unauthorized access a...

3.3CVSS6.7AI score0.00205EPSS
SaveExploits0References7
Rows per page
Query Builder