EUVD-2020-18734

Malware in sbrugna...

EUVD-2020-18733

Malware in sbrugna...

CVE-2020-26104

In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM SEC-552...

CVE-2020-26105

In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM SEC-554...

CVE-2020-26101

In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM SEC-549...

Default credentials

In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM SEC-549...

Design/Logic Flaw

In cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM SEC-551...

Code injection

In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM SEC-552...

Design/Logic Flaw

In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM SEC-554...

Code injection

In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM SEC-550...

CVE-2020-26101

The CVE-2020-26101 affects cPanel prior to 88.0.3, where insecure RNDC credentials are used for BIND on a templated VM (SEC-549). The issue is documented across multiple sources (NVD entry for CVE-2020-26101 and related CNVD/CVE records). Affected software: cPanel

CVE-2020-26102

In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM SEC-550...

CVE-2020-26102

CVE-2020-26102 affects cPanel before 88.0.3 where Dovecot on a templated VM uses an insecure auth policy API key (SEC-550). The vulnerability is evidenced by public records showing a policy-key weakness in the Dovecot integration within cPanel’s VM templating. Public CVSS metrics indicate medium ...

CVE-2020-26103

CVE-2020-26103 affects cPanel prior to 88.0.3, where an insecure site password is used for Mailman on a templated VM. Root cause is insecure credential handling for Mailman. Impact is limited to exposure/ misuse of the Mailman credential as described in the vulnerability, with no additional explo...

CVE-2020-26103

In cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM SEC-551...

CVE-2020-26104

In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM SEC-552...

CVE-2020-26104

CVE-2020-26104 affects cPanel prior to 88.0.3, where an insecure SRS secret is used on a templated VM (SEC-552). The connected sources (NVD, Red Hat, CNVD, CVE lists) consistently describe this weakness as an insecure SRS secret in templated VM usage, with no additional technical details provided...

CVE-2020-26105

In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM SEC-554...

CVE-2020-26105

In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554). The vulnerability affects cPanel releases prior to 88.0.3 involving chkservd credential handling on templated VMs. Root cause is insecure test credentials being used in the chkservd process; explicit...