5323 matches found
CVE-2016-10786
cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys SEC-186...
CVE-2016-10779
cPanel before 60.0.25 allows stored XSS in api1listautoresponders SEC-179...
CVE-2016-10785
cPanel before 60.0.25 allows attackers to discover file contents during file copy operations SEC-185...
CVE-2016-10784
cPanel before 60.0.25 allows self XSS in the alias upload interface SEC-184...
CVE-2016-10777
cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscoverhost SEC-177...
CVE-2016-10783
cPanel before 60.0.25 allows self stored XSS in SSLlistkeys SEC-182...
CVE-2016-10782
cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs SEC-181...
CVE-2016-10779
cPanel before 60.0.25 allows stored XSS in api1listautoresponders SEC-179...
CVE-2016-10780
cPanel before 60.0.25 allows stored XSS in the ftpsessions API SEC-180...
CVE-2016-10786
cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys SEC-186...
CVE-2016-10787
The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries SEC-187...
Design/Logic Flaw
cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...
Design/Logic Flaw
cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscoverhost SEC-177...
Cross site scripting
cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs SEC-181...
Improper access control
The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries SEC-187...
Design/Logic Flaw
cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys SEC-186...
Design/Logic Flaw
cPanel before 60.0.25 allows self XSS in the alias upload interface SEC-184...
Design/Logic Flaw
cPanel before 60.0.25 allows stored XSS in api1listautoresponders SEC-179...