4088 matches found
CVE-2017-18402
CVE-2017-18402 affects cPanel versions before 68.0.15 and is a stored XSS vulnerability occurring during a cpaddons moderated upgrade (SEC-336). Multiple connected sources (RH, CNVD, NVD) confirm the flaw and its association with the upgrade path, without detailing exploit vectors. The applicable...
CVE-2017-18401
cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats SEC-334...
CVE-2017-18401
CVE-2017-18401 affects cPanel prior to 68.0.15, where account creation could partially succeed with invalid username formats (SEC-334). The vulnerability is documented across multiple sources (NVD/Red Hat/CNVD). A patch to 68.0.15 or later is the stated remediation in available references; no exp...
CVE-2017-18400
cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...
CVE-2017-18400
CVE-2017-18400 affects cPanel before 68.0.15, enabling local root code execution via the cpdavd component. The vulnerability is triggered by an attacker with local access, leading to complete control over the host’s root privileges as described in multiple sources (e.g., Red Hat advisory and CNVD...
CVE-2017-18399
cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer SEC-332...
CVE-2017-18399
CVE-2017-18399 affects cPanel prior to 68.0.15. The issue allows an attacker to read the root user’s crontab file during a short interval when enabling or disabling the sqloptimizer feature (SEC-332). Public references in the dataset confirm affected product/version and the disclosure, with no ex...
CVE-2017-18398
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains SEC-331...
CVE-2017-18398
The CVE-2017-18398 entry refers to cPanel's DnsUtils prior to version 68.0.15, where zone creation is possible for hostname and account subdomains (SEC-331). This is documented across multiple connected sources (RH/CVE, NVD, CNVD/CNVD-2019-36129) indicating a vulnerability in the DNS management u...
CVE-2017-18397
cPanel before 68.0.15 does not preserve permissions for local backup transport SEC-330...
CVE-2017-18397
CVE-2017-18397 affects cPanel prior to 68.0.15. The issue is that local backup transport does not preserve permissions, as described in SEC-330. The root cause is a permissions preservation defect in the local backup transport workflow. Impact is limited to affected backups with incorrect permiss...
CVE-2017-18396
cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases SEC-329...
CVE-2017-18396
The CVE-2017-18396 issue affects cPanel before 68.0.15, where Exim vdomainaliases enables arbitrary file-read operations. Root cause: improper handling in vdomainaliases leads to access to restricted files. Impact: potential disclosure of sensitive data on affected systems. Evidence from Red Hat ...
CVE-2017-18395
cPanel before 68.0.15 does not block a username of ssl SEC-328...
CVE-2017-18395
CVE-2017-18395 affects cPanel before 68.0.15, where the system does not block a username of ssl (SEC-328). This is corroborated by Red Hat and other records in the connected data. Public details describe the issue but do not provide a patch or remediation steps within the supplied documents. CVSS...
CVE-2017-18394
cPanel before 68.0.15 does not have a sufficient list of reserved usernames SEC-327...
CVE-2017-18394
CVE-2017-18394 affects cPanel prior to 68.0.15, where the reserved usernames list is insufficient (SEC-327). The Red Hat entry repeats the same description. No further technical details (vulnerable component, exploit specifics, affected products beyond cPanel, or concrete remediation/patch versio...
CVE-2017-18393
cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail SEC-326...
CVE-2017-18393
CVE-2017-18393 affects cPanel prior to 68.0.15. The issue is that the system does not block a username of postmaster, which could allow reception of private email. This is the core vulnerability described in multiple connected records (including RH/CVE-2017-18393 and NVD entry). Practical impact:...