CentOS Web Panel ajax_new_account.php file SQL injection vulnerability

CentOS Web Panel CWP is a free web hosting control panel. A SQL injection vulnerability exists in the ajaxnewaccount.php file in CentOS Web Panel cwp-e version 17.0.9.8.923, which originates when the program does not properly validate a user-supplied string. An attacker could exploit this...

CentOS Web Panel ajax_list_accounts.php file SQL injection vulnerability

CentOS Web Panel CWP is a free web hosting control panel. A SQL injection vulnerability exists in the ajaxlistaccounts.php file in CentOS Web Panel cwp-e version 17.0.9.8.923, which stems from the program not properly validating a user-supplied string. An attacker could exploit this vulnerability...

CentOS Web Panel ajax_dashboard.php file command injection vulnerability

CentOS Web Panel CWP is a free web hosting control panel. A security vulnerability in the ajaxdashboard.php file in the CentOS Web Panel cwp-el7-0.9.8.891 release stems from a failure to properly validate a user-supplied string before executing a system call. An attacker can exploit this...

CentOS 7 : grub2 (RHSA-2020:3217)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3217 advisory. - A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw...

CentOS 7 : kernel (RHSA-2020:3220)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3220 advisory. - Insufficient access control in the IntelR PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially...

grub2, mokutil, shim security update

CentOS Errata and Security Advisory CESA-2020:3217 An update for grub2, shim, shim-signed, and fwupdate is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score,...

bpftool, kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2020:3220 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS Web Panel SQL Injection Vulnerability (CNVD-2020-43613)

CentOS Web Panel CWP is a free web hosting control panel. A SQL injection vulnerability exists in the ajaxmailautoreply.php file in CentOS Web Panel cwp-e version 17.0.9.8.923, which originates from the program not properly validating a user-supplied string. An attacker could exploit this...

CentOS Web Panel Operating System Command Injection Vulnerability

CentOS Web Panel CWP is a free web hosting control panel. An operating system command injection vulnerability exists in the ajaxftpmanager.php file in the CentOS Web Panel cwp-el7-0.9.8.891 release, which stems from the program failing to properly validate a system call before executing it with a...

CentOS Web Panel Operating System Command Injection Vulnerability (CNVD-2020-43608)

CentOS Web Panel CWP is a free web hosting control panel. An operating system command injection vulnerability exists in the ajaxcrons.php file in the CentOS Web Panel cwp-el7-0.9.8.891 release, which stems from failure to properly validate a user-supplied string before executing a system call. An...

CentOS Web Panel SQL Injection Vulnerability (CNVD-2020-43616)

CentOS Web Panel CWP is a free web hosting control panel. A SQL injection vulnerability exists in the ajaxaddmailbox.php file in CentOS Web Panel cwp-e version 17.0.9.8.923, which stems from the program not properly validating a user-supplied string. An attacker could exploit this vulnerability t...

CentOS: Security Advisory for mokutil (CESA-2020:3217)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for shim-unsigned-ia32 (CESA-2020:3217)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS Web Panel SQL Injection Vulnerability (CNVD-2020-43607)

CentOS Web Panel CWP is a free web hosting control panel. A SQL injection vulnerability exists in the ajaxlistaccounts.php file in CentOS Web Panel cwp-e version 17.0.9.8.923, which stems from the program not properly validating a user-supplied string. An attacker could exploit this vulnerability...

CentOS Web Panel SQL Injection Vulnerability (CNVD-2020-43612)

CentOS Web Panel CWP is a free web hosting control panel. A SQL injection vulnerability exists in the ajaxlistaccounts.php file in CentOS Web Panel cwp-e version 17.0.9.8.923, which stems from the program not properly validating a user-supplied string. An attacker could exploit this vulnerability...

CentOS Web Panel Operating System Command Injection Vulnerability (CNVD-2020-43609)

CentOS Web Panel CWP is a free web hosting control panel. An operating system command injection vulnerability exists in the ajaxadminapis.php file in the CentOS Web Panel cwp-el7-0.9.8.891 release, which stems from failure to properly validate user-supplied strings before executing system calls. ...

CentOS: Security Advisory for grub2 (CESA-2020:3217)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS Web Panel Operating System Command Injection Vulnerability (CNVD-2020-43610)

CentOS Web Panel CWP is a free web hosting control panel. An operating system command injection vulnerability exists in the ajaxphppecl.php file in the CentOS Web Panel cwp-el7-0.9.8.891 release, which stems from failure to properly validate user-supplied strings before executing system calls. An...

CentOS: Security Advisory for bpftool (CESA-2020:3220)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS Web Panel Code Issue Vulnerability

CentOS Web Panel CWP is a free web hosting control panel. A code issue vulnerability exists in the ajaxmodsecurity.php file in CentOS Web Panel cwp-e version 17.0.9.8.923, which stems from not properly validating user-supplied paths. An attacker could exploit the vulnerability to execute code...