1412 matches found
CVE-2017-18410
In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server SEC-284...
CVE-2017-18411
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2017-18409
In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases SEC-283...
Input validation
In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases SEC-283...
CVE-2017-18411
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2017-18411
The CVE-2017-18411 issue concerns cPanel’s addon domain conversion feature (pre-67.9999.103). The affected component is the addon domain conversion workflow, which can copy all MySQL databases to the newly created account, per SEC-285. The available documents describe the vulnerability impact as ...
CVE-2017-18409
In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases SEC-283...
CVE-2017-18409
In this CVE, the affected software is cPanel prior to 67.9999.103. The backup interface could return a backup archive containing all MySQL databases (SEC-283), indicating an information disclosure vulnerability in the backup generation process. The available sources do not specify the exact root ...
CVE-2017-18411: Improper Input Validation
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2017-18409: Improper Input Validation
In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases SEC-283...
PT-2019-8344
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 67.9999.103 Description The backup interface in cPanel could return a backup archive with all MySQL databases. Recommendations For versions prior to 67.9999.103, update to version 67.9999.103 or later to resolve the...
PT-2019-8345
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 67.9999.103 Description A security issue allows a user account's backup archive to contain all MySQL databases on the server. Recommendations For versions prior to 67.9999.103, update to version 67.9999.103 or later to...
PT-2019-8346
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 67.9999.103 Description The issue concerns the "addon domain conversion" feature in cPanel, which can copy all MySQL databases to the new account. Recommendations For versions prior to 67.9999.103, update to version...
CVE-2017-18410: Improper Input Validation
In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server SEC-284...
PostgreSQL 9.5.x < 9.5.17, 9.6.x < 9.6.13, 10.x < 10.8, 11.x < 11.3 Information Disclosure Vulnerability - Windows
PostgreSQL is prone to an information disclosure vulnerability due to selectivity estimators bypass row security policies. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
A week in security (July 22 – 28)
Last week on Malwarebytes Labs, we offered an extensive analysis into the Malaysian Airlines Flight 17 investigation, updated users on the newest feature set to AdwCleaner 7.4.0 it now detects pre-installed software, and provided a deep dive into Phobos ransomware. We also broke down the latest...
CVE-2019-13057
An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for certain databases but wants to maintain isolation e.g., for multi-tenant deployments, slapd does not properly stop a rootDN from requesting authorization a...
ALPINE-CVE-2019-13057
An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for certain databases but wants to maintain isolation e.g., for multi-tenant deployments, slapd does not properly stop a rootDN from requesting authorization a...
DEBIAN-CVE-2019-13057
An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for certain databases but wants to maintain isolation e.g., for multi-tenant deployments, slapd does not properly stop a rootDN from requesting authorization a...
