4040 matches found
CVE-2018-20913
cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi SEC-364...
CVE-2018-20913
CVE-2018-20913 affects cPanel before 70.0.23. The vulnerability allows an attacker to read the root accesshash via the WHM path /cgi/trustclustermaster.cgi (SEC-364). The available sources describe the vulnerability as an information disclosure condition impacting the root accesshash, with no pub...
CVE-2018-20912
cPanel before 70.0.23 allows demo accounts to execute code via awstats SEC-362...
CVE-2018-20912
Summary: CVE-2018-20912 affects cPanel before 70.0.23, where demo accounts could cause code execution via awstats (SEC-362). The issue is reported across multiple sources (e.g., Red Hat and CNVD entries) with the consistent description that vulnerable versions prior to 70.0.23 permit arbitrary co...
CVE-2016-10855
cPanel before 11.54.0.4 allows unauthenticated arbitrary code execution via cpsrvd SEC-91...
CVE-2016-10855
CVE-2016-10855 affects cPanel before 11.54.0.4, where cpsrvd allows unauthenticated arbitrary code execution (SEC-91). The vulnerability is documented across multiple feeds (NVD/Red Hat/CNVD) with no indication of affected other versions beyond pre-11.54.0.4. The standard remediation is upgrading...
CVE-2018-20911
cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup SEC-359...
CVE-2018-20911
CVE-2018-20911 affects cPanel before 70.0.23. The root cause is a Perl syntax check failure in cpaddonsup caused by a dot (.) being in @INC, enabling code execution. The vulnerability results in code execution, with impact described as such in the sources. Remediation: apply the fixed version 70....
CVE-2016-10856
cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds SEC-29...
CVE-2016-10856
CVE-2016-10856 affects cPanel prior to 11.54.0.0, where subaccounts can disclose sensitive data through comet feeds (SEC-29). The provided connected sources confirm the affected product/version range and the data exposure vector but do not specify deeper root cause or exploit details. No explicit...
CVE-2016-10857
cPanel before 11.54.0.0 allows a bypass of the e-mail sending limit SEC-60...
CVE-2016-10857
CVE-2016-10857 affects cPanel prior to 11.54.0.0, with a bypass of the e-mail sending limit (SEC-60). The Red Hat and other feeds corroborate this description. The concrete root cause, impacted components, and exact exploit details are not provided in the documents; no explicit remediation steps ...
CVE-2016-10858
cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-64...
CVE-2016-10858
CVE-2016-10858 affects cPanel before 11.54.0.0, allowing unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64). Data: multiple sources confirm impact on the cPanel product; remediation indicated is upgrading to 11.54.0.0 or later. Exploitation details and in-the-wild status...
CVE-2016-10859
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands SEC-65...
CVE-2016-10859
CVE-2016-10859 affects cPanel before 11.54.0.0. The issue allows unauthorized password changes through Webmail API commands (SEC-65). Root cause details are not expanded beyond the description in the provided documents. Exploitation status and concrete remediation steps are not specified in the c...
CVE-2016-10860
CVE-2016-10860 affects cPanel before 11.54.0.0 and is documented as allowing unauthorized zone modification through the WHM API (SEC-66). The vulnerability is corroborated across multiple sources in the connected documents (NVD entry and Red Hat advisory), which state the same affected software a...
CVE-2016-10860
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
CVE-2015-9291
CVE-2015-9291 affects cPanel prior to 11.52.0.13, where the get_information_for_applications path could be abused to read arbitrary files. The root cause is that the system does not prevent such file reads, enabling exposure of potentially sensitive information via CPANEL-1221. The connected Red ...