4090 matches found
CVE-2017-18479
In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address SEC-209...
CVE-2017-18478
In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions SEC-207...
CVE-2017-18478
Affected software: cPanel prior to 62.0.4. Vulnerability: incorrect ACL checks in xml-api for Rearrange Account actions, caused by an ACL bypass issue. Impact: potential improper access control. Mitigation: upgrade to 62.0.4 or later (as cited by cPanel and related CVE records). Notes: the connec...
CVE-2017-18477
In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account SEC-206...
CVE-2017-18477
CVE-2017-18477 : Affects cPanel before 62.0.4 where Exim transports could execute in the context of the nobody account (SEC-206). Root cause described as a context execution issue within Exim transports. Impact: potential privilege context exposure/run as nobody; document does not quantify additi...
CVE-2017-18476
CVE-2017-18476 concerns Leech Protect in cPanel prior to 62.0.4 not protecting certain directories (bug tracked as SEC-205). The connected sources consistently state this issue affecting cPanel. No further technical details (root cause, impacted components beyond Leech Protect, exploit vectors, o...
CVE-2017-18476
Leech Protect in cPanel before 62.0.4 does not protect certain directories SEC-205...
CVE-2017-18475
CVE-2017-18475 affects cPanel before 62.0.4. Exim piped filters run in the context of an incorrect user account when delivering to a system user (SEC-204). CVSS v3.0 base score 8.8 (HIGH) indicates potentially high impact on confidentiality, integrity and availability. Upgrade to cPanel 62.0.4 or...
CVE-2017-18475
In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user SEC-204...
CVE-2017-18474
cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases SEC-201...
CVE-2017-18474
CVE-2017-18474 affects cPanel before 62.0.4. The issue allows arbitrary file-read operations via Exim valiases, due to an improper handling path/resource filtering. Public descriptions consistently show impact as reading restricted files. Connected documents confirm the product/version and the un...
CVE-2017-18473
CVE-2017-18473 affects cPanel before 62.0.4, where the Webmail Password and Security page is vulnerable to a self-XSS due to insufficient input validation. Root cause cited in CNVD as lack of proper validation of client-side data. Impact is self-XSS on affected page; exploitation details are not ...
CVE-2017-18473
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
CVE-2017-18472
Affected product: cPanel before 62.0.4. Vulnerability: reflected XSS in the reset-password interface (SEC-198). Root cause: lack of proper validation of client-side data in the reset-password flow. Impact: allows execution of client-side code in some contexts. Remediation: upgrade to cPanel 62.0....
CVE-2017-18472
cPanel before 62.0.4 allows reflected XSS in reset-password interfaces SEC-198...
CVE-2017-18471
Summary: CVE-2017-18471 affects cPanel versions before 62.0.4. The issue is a self‑XSS vulnerability on the paper_lantern password‑change screen. Affected software/component: cPanel hosting control panel; paper_lantern password‑change UI. Root cause: Self‑XSS due to insufficient input/output hand...
CVE-2017-18471
cPanel before 62.0.4 allows self XSS on the paperlantern password-change screen SEC-197...
CVE-2017-18470
CVE-2017-18470 affects cPanel prior to 62.0.4, where the Munin MySQL test account used a fixed password. Red Hat and NVD entries corroborate this description. Impact stated in sources centers on credential exposure due to a fixed/default credential for the Munin test account; no additional exploi...