Design/Logic Flaw

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

Design/Logic Flaw

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks SEC-585...

Design/Logic Flaw

In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...

Design/Logic Flaw

In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files SEC-586...

Design/Logic Flaw

In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files SEC-588...

Command injection

In cPanel before 96.0.13, fixcpanelperl lacks verification of the integrity of downloads SEC-587...

CVE-2021-38586

In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...

CVE-2021-38589

In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files SEC-588...

CVE-2021-38588

In cPanel before 96.0.13, fixcpanelperl lacks verification of the integrity of downloads SEC-587...

CVE-2021-38587

In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files SEC-586...

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

Information disclosure

In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure SEC-584...

CVE-2021-38584

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks SEC-585...

CVE-2021-38590

In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure SEC-584...

CVE-2021-38584

The CVE-2021-38584 issue affects the cPanel WHM Locale Upload feature in cPanel before 98.0.1. Root cause: an XXE vulnerability in the Locale Upload processing. Impact: XXE attacks could be triggered through the Locale Upload feature. Remediation: upgrade to cPanel 98.0.1 or later (patch mentione...

CVE-2021-38584

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks SEC-585...

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

CVE-2021-38585

CVE-2021-38585 describes a vulnerability in the WHM Locale Upload feature of cPanel, where versions before 98.0.1 are susceptible to unserialization attacks (SEC-585). The issue stems from an unserialization flaw in the locale upload flow, enabling attackers to potentially exploit the component. ...

CVE-2021-38586

In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...

CVE-2021-38586

CVE-2021-38586 affects cPanel prior to 98.0.1. The issue is in /scripts/cpan_config, performing unsafe operations on files (SEC-589). The NVD metrics show CVSSv2/2.0: Low (2.1) with local access; CVSSv3.1/3.1: Medium (4.4) with local access, high integrity impact. Exploitation details or remediat...