4119 matches found
CVE-2016-10842
cPanel before 11.54.0.4 allows certain file-read operations in bin/setupglobalspamfilter.pl SEC-74...
CVE-2016-10843
cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...
CVE-2016-10843
Summary: CVE-2016-10843 affects cPanel prior to 11.54.0.4 and allows code execution in the context of shared users via the JSON-API (SEC-76). Affected product/vector: cPanel software; vulnerability arises through the JSON-API, enabling code execution in shared-user context. Root cause / impact: N...
CVE-2016-10844
The chcpass script in cPanel before 11.54.0.4 reveals a password hash SEC-77...
CVE-2016-10844
The vulnerability CVE-2016-10844 affects cPanel prior to 11.54.0.4. The issue lies in the chcpass script, which can reveal a password hash (SEC-77). Impact is an information disclosure risk affecting affected cPanel deployments. The Red Hat security entry and CNVD record corroborate the same desc...
CVE-2016-10845
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/checksystemstorable SEC-78...
CVE-2016-10845
CVE-2016-10845 affects cPanel prior to 11.54.0.4. The issue is an arbitrary file-overwrite in scripts/check_system_storable (SEC-78) due to improper input handling/validation. Impact is partial confidentiality, integrity, and availability per CVSS2/3 data; exploitation details are not provided in...
CVE-2016-10846
cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions SEC-79...
CVE-2016-10846
CVE-2016-10846 affects cPanel prior to 11.54.0.4, enabling arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79). The issue is rooted in the Roundcube database conversion process and allows limited privileges to perform file ownership and permission changes...
CVE-2016-10847
CVE-2016-10847 affects cPanel prior to 11.54.0.4. The vulnerability allows arbitrary file-read and file-write operations via the scripts/fixmailboxpath entry point (SEC-80). This could enable an attacker to read or write sensitive files on affected systems. Evidence from multiple sources confirms...
CVE-2016-10847
cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath SEC-80...
CVE-2016-10848
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck SEC-81...
CVE-2016-10848
CVE-2016-10848 affects cPanel prior to 11.54.0.4, allowing arbitrary file-overwrite operations in scripts/quotacheck (SEC-81). The issue is documented across multiple sources (NVD, Red Hat advisory) with a high impact rating (C/V: high; A: high) and network attack vector. The provided materials d...
CVE-2016-10849
CVE-2016-10849 affects cPanel before 11.54.0.4, where file-chmod operations in scripts/secureit (SEC-82) can be abused. Connected documents confirm the affected product/version and the specific component (scripts/secureit) with an integrity impact (I:H in CVSS3) and a network vector with low atta...
CVE-2016-10849
cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit SEC-82...
CVE-2018-20929
cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint SEC-392...
CVE-2018-20929
CVE-2018-20929 affects cPanel prior to version 70.0.23. The vulnerability is an open redirect via the /unprotected/redirect.html endpoint (SEC-392). The available connected documents confirm the issue and its target endpoint but do not provide further technical details, impact, exploit status, or...
CVE-2018-20927
cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing SEC-382...
CVE-2018-20927
CVE-2018-20927 (cPanel) affects cPanel prior to 70.0.23, where jailshell escape is possible due to incorrect crontab parsing (SEC-382). Exploitation is described as local (attack vector LOCAL) with LOW severity in CVSSv3 (3.8) and LOW in CVSSv2 (2.1). The root cause is mis-parsing of crontab entr...