CVE-2017-18452

CVE-2017-18452 affects cPanel before 64.0.21. The vulnerability allows code execution via Rails configuration files (SEC-259). Connected documents corroborate the issue across multiple sources (Red Hat, CNVD, NVD, CVE records). No additional exploit details, affected component versions beyond the...

CVE-2017-18451

CVE-2017-18451 affects cPanel prior to version 64.0.21 . The vulnerability allows an attacker to read a user’s crontab file for a short window during a cPAddon upgrade (SEC-257). This information disclosure is confirmed by multiple connected documents from cPanel/Red Hat/CNVD/CVE records. Impact ...

CVE-2017-18451

cPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval upon a cPAddon upgrade SEC-257...

CVE-2017-18450

CVE-2017-18450 affects cPanel prior to 64.0.21 and is associated with file-chmod operations via the script /scripts/convert_roundcube_mysql2sqlite (SEC-255). The vulnerability is documented across multiple sources (NVD, Red Hat, CVE lists) as allowing certain file permission changes and has CVSS ...

CVE-2017-18450

cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convertroundcubemysql2sqlite SEC-255...

CVE-2017-18449

CVE-2017-18449 affects cPanel prior to 64.0.21. The issue enables certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254). The vulnerability is caused by insufficient validation of file rename actions within the specified script path,...

CVE-2017-18449

cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...

CVE-2017-18448

cPanel before 64.0.21 allows certain file-read operations via a Serverinfomanpage API call SEC-252...

CVE-2017-18448

CVE-2017-18448 affects cPanel before 64.0.21, where a Serverinfo_manpage API call allows certain file-read operations (SEC-252). This can lead to partial confidentiality impact. Red Hat/CPE entries corroborate the issue; updating to 64.0.21 or newer is the documented remediation. If applying fixe...

CVE-2017-18447

CVE-2017-18447 affects cPanel before 64.0.21. The root cause is a vulnerability in the ClamScanner_getsocket API that enables code execution by demo accounts. Impact is code execution with low privileges; attack surface is the affected cPanel environment. The provided documents do not include exp...

CVE-2017-18447

cPanel before 64.0.21 allows demo accounts to execute code via the ClamScannergetsocket API SEC-251...

CVE-2017-18446

CVE-2017-18446 affects cPanel prior to 64.0.21. The issue allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250). The Red Hat/CNVD/EUVD/ENISA entries corroborate the core description. Impact as stated is potential access to restricted files and modificati...

CVE-2017-18446

cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API SEC-250...

CVE-2017-18445

CVE-2017-18445 affects cPanel prior to 64.0.21. The issue is that SSL API calls could bypass demo restrictions, as described in SEC-249. The available connected documents confirm the product/version and the nature of the vulnerability but do not provide exploits, in-the-wild details, or explicit ...

CVE-2017-18445

cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls SEC-249...

CVE-2017-18444

CVE-2017-18444 affects cPanel before 64.0.21, enabling demo accounts to execute SSH API commands (SEC-248). Multiple sources (NVD, Red Hat, CNVD) confirm the impact. The provided documents do not specify the underlying root cause, affected component details, exact exploit vectors, or a confirmed ...

CVE-2017-18444

cPanel before 64.0.21 allows demo accounts to execute SSH API commands SEC-248...

CVE-2017-18443

cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding SEC-247...

CVE-2017-18443

CVE-2017-18443 affects cPanel prior to 64.0.21. The issue allows demo and suspended accounts to use SSH port forwarding, indicating a flaw in access control around SSH features (SEC-247). The documented remediation is to upgrade to version 64.0.21 or later. The connected sources confirm the descr...

CVE-2017-18442

CVE-2017-18442 : Affected software is cPanel prior to 64.0.21. The issue allows demo accounts to trigger Cpanel::SPFUI API commands (SEC-246), implying limited privilege elevation within the control panel API. The description and connected documents do not provide additional exploitation details ...