Lucene search
+L

2226 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/02 12:00 a.m.•6 views

CVE-2017-18424: Exposure of Sensitive Information to an Unauthorized Actor

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...

3.3CVSS5.8AI score0.00362EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/02 12:00 a.m.•5 views

CVE-2017-18391: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...

2.5CVSS5.8AI score0.00294EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/08/02 12:00 a.m.•4 views

PT-2019-8326

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows attackers to read backup files because they are world-readable during a short time interval. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to...

2.5CVSS0.00294EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/02 12:00 a.m.•7 views

CVE-2017-18412: Insertion of Sensitive Information into Log File

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...

2.5CVSS5.8AI score0.00294EPSS
SaveExploits0References2
OSV
OSV
•added 2019/08/01 7:15 p.m.•13 views

CVE-2016-10819

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...

6.5CVSS5.8AI score0.01095EPSS
SaveExploits0References2
NVD
NVD
•added 2019/08/01 7:15 p.m.•32 views

CVE-2016-10819

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...

6.5CVSS6.5AI score0.01095EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/01 7:15 p.m.•24 views

Cross site scripting

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...

4CVSS7.1AI score0.01095EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/08/01 6:31 p.m.•34 views

CVE-2016-10819

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...

6.5AI score0.01095EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/01 6:31 p.m.•94 views

CVE-2016-10819

CVE-2016-10819 affects cPanel before 57.9999.54. When cpanellogd rotates user log files, they become world-readable, exposing user logs (classified as a confidentiality impact). The vulnerability is described consistently across multiple sources (NVD, Red Hat, CNVD, CVE listings). Remediation is ...

6.5CVSS6.5AI score0.01095EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2019/08/01 5:15 p.m.•29 views

CVE-2018-20952

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

6.5CVSS6.5AI score0.00875EPSS
SaveExploits0References1
OSV
OSV
•added 2019/08/01 5:15 p.m.•16 views

CVE-2018-20946

cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...

3.3CVSS5.8AI score0.0035EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/01 5:15 p.m.•28 views

Code injection

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

4CVSS6.5AI score0.00875EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/08/01 4:19 p.m.•30 views

CVE-2018-20952

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

6.6AI score0.00875EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/01 4:19 p.m.•78 views

CVE-2018-20952

CVE-2018-20952 affects cPanel prior to 68.0.27. The issue involves world-readable files created during use of the WHM Apache Includes Editor (SEC-388). The public description confirms the vulnerable state; no exploitation details are provided in the supplied documents. Remediation appears to be u...

6.5CVSS6.5AI score0.00875EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/08/01 4:14 p.m.•28 views

CVE-2018-20946

cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...

3.8AI score0.0035EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/01 4:14 p.m.•72 views

CVE-2018-20946

cPanel before 68.0.27 exposes zone information because the archive_sync_zones script creates a world‑readable archive. This info disclosure vulnerability is documented across CVE‑2018‑20946 entries (NVD, RH, CNVD, etc.). Impact is information exposure of zones; CVSS v3 score is Low (3.3) with loc...

3.3CVSS3.9AI score0.0035EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2019/08/01 12:00 a.m.•3 views

PT-2019-10381

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue allows attackers to read zone information due to a world-readable archive created by the archive sync zones script. Recommendations: For versions prior to 68.0.27, update to version...

3.3CVSS0.0035EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/01 12:00 a.m.•6 views

CVE-2018-20952: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

6.5CVSS5.8AI score0.00875EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/01 12:00 a.m.•4 views

CVE-2018-20946: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...

3.3CVSS5.8AI score0.0035EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/08/01 12:00 a.m.•3 views

PT-2019-7615

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue affects user log files in cPanel, making them world-readable when rotated by cpanellogd. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to resol...

6.5CVSS0.01095EPSS
SaveExploits0References4
Rows per page
Query Builder