4088 matches found
CVE-2016-10818
cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup SEC-124...
CVE-2016-10818
CVE-2016-10818 affects cPanel before 57.9999.54, where log-file permissions are incorrectly set in dnsadmin-startup and spamd-startup (SEC-124). The issue is tied to startup scripts in these components; no exploitation details are provided in the available documents. The NVD entry lists CVSS scor...
CVE-2016-10819
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...
CVE-2016-10819
CVE-2016-10819 affects cPanel before 57.9999.54. When cpanellogd rotates user log files, they become world-readable, exposing user logs (classified as a confidentiality impact). The vulnerability is described consistently across multiple sources (NVD, Red Hat, CNVD, CVE listings). Remediation is ...
CVE-2016-10820
CVE-2016-10820 affects cPanel before 55.9999.141, where daemons can access their controlling TTYs (SEC-31). The issue, described as an access control weakness, yields high impact on confidentiality, integrity, and availability (per CVSS). Actionable remediation: upgrade to 55.9999.141 or later; v...
CVE-2016-10820
cPanel before 55.9999.141 allows daemons to access their controlling TTYs SEC-31...
CVE-2016-10821
Affected product/versions: cPanel before 55.9999.141. Vulnerability: Scripts/addpop exposes a command-line password in a process list (SEC-75). Impact: Partial confidentiality impact due to credential exposure in process listings; no other impacts indicated. Root cause (as stated): password visib...
CVE-2016-10821
In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list SEC-75...
CVE-2016-10826
cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests SEC-93...
CVE-2016-10826
CVE-2016-10826 affects cPanel preceding 55.9999.141, where attackers can bypass two‑factor authentication via DNS clustering requests (SEC-93). The Red Hat/CNVD/NVD entries corroborate the vulnerability description and affected version. Remediation noted in public records is to upgrade to 55.9999...
CVE-2018-20953
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
CVE-2018-20950
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
CVE-2018-20949
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2018-20950
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
CVE-2018-20951
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
CVE-2018-20951
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
CVE-2018-20948
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...
CVE-2018-20953
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...