VYPR

CVEs

408,171 total · page 5716 of 8,164

AllCriticalHighKEV
  • CVE-2016-10829MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.42cvss 6.5epss 0.01

    cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99).

  • CVE-2016-10828HigAug 1, 2019
    CPanel
    Cpanel
    risk 0.57cvss 8.8epss 0.03

    cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97).

  • CVE-2016-10827MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.4epss 0.01

    cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96).

  • CVE-2016-10825HigAug 1, 2019
    CPanel
    Cpanel
    risk 0.53cvss 8.1epss 0.01

    cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92).

  • CVE-2016-10824CriAug 1, 2019
    CPanel
    Cpanel
    risk 0.64cvss 9.8epss 0.03

    cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90).

  • CVE-2016-10823HigAug 1, 2019
    CPanel
    Cpanel
    risk 0.57cvss 8.8epss 0.02

    cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89).

  • CVE-2016-10822MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.4epss 0.01

    cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88).

  • CVE-2019-14486HigAug 1, 2019
    GnuCOBOL
    GnuCOBOL
    risk 0.51cvss 7.8epss 0.01

    GnuCOBOL 2.2 has a buffer overflow in cb_evaluate_expr in cobc/field.c via crafted COBOL source code.

  • CVE-2018-20935MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.4epss 0.01

    cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412).

  • CVE-2018-20934MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.42cvss 6.5epss 0.01

    cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).

  • CVE-2018-20933MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.4epss 0.01

    cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410).

  • CVE-2018-20932LowAug 1, 2019
    CPanel
    Cpanel
    risk 0.18cvss 2.7epss 0.01

    cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406).

  • CVE-2018-20931MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.41cvss 6.3epss 0.01

    cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405).

  • CVE-2018-20930MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.42cvss 6.5epss 0.01

    cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401).

  • CVE-2018-20929MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.40cvss 6.1epss 0.01

    cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392).

  • CVE-2018-20928MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.40cvss 6.1epss 0.01

    cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).

  • CVE-2018-20927LowAug 1, 2019
    CPanel
    Cpanel
    risk 0.25cvss 3.8epss 0.00

    cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).

  • CVE-2018-20926MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.44cvss 6.7epss 0.00

    cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380).

  • CVE-2018-20925MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.44cvss 6.7epss 0.00

    cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379).

  • CVE-2018-20924MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.36cvss 5.5epss 0.01

    cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).

  • CVE-2016-10849MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.42cvss 6.5epss 0.01

    cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82).

  • CVE-2016-10848HigAug 1, 2019
    CPanel
    Cpanel
    risk 0.47cvss 7.2epss 0.01

    cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81).

  • CVE-2016-10847HigAug 1, 2019
    CPanel
    Cpanel
    risk 0.53cvss 8.1epss 0.01

    cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80).

  • CVE-2016-10846HigAug 1, 2019
    CPanel
    Cpanel
    risk 0.53cvss 8.1epss 0.01

    cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79).

  • CVE-2016-10845HigAug 1, 2019
    CPanel
    Cpanel
    risk 0.53cvss 8.1epss 0.01

    cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78).

  • CVE-2016-10844MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.42cvss 6.5epss 0.01

    The chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77).

  • CVE-2016-10843HigAug 1, 2019
    CPanel
    Cpanel
    risk 0.53cvss 8.1epss 0.01

    cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76).

  • CVE-2016-10842MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.42cvss 6.5epss 0.01

    cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74).

  • CVE-2016-10841MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.3epss 0.01

    The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).

  • CVE-2016-10840HigAug 1, 2019
    CPanel
    Cpanel
    risk 0.57cvss 8.8epss 0.02

    cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).

  • CVE-2016-10839HigAug 1, 2019
    CPanel
    Cpanel
    risk 0.53cvss 8.1epss 0.01

    cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71).

  • CVE-2016-10838MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.42cvss 6.5epss 0.01

    cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script (SEC-70).

  • CVE-2016-10837HigAug 1, 2019
    CPanel
    Cpanel
    risk 0.49cvss 7.5epss 0.02

    cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46).

  • CVE-2016-10836MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.42cvss 6.5epss 0.01

    cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav (SEC-108).

  • CVE-2019-14472MedAug 1, 2019
    Zurmo
    Zurmo CRM
    risk 0.40cvss 6.1epss 0.01

    Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATH_INFO.

  • CVE-2019-14471MedAug 1, 2019
    Testlink
    Testlink
    risk 0.40cvss 6.1epss 0.01

    TestLink 1.9.19 has XSS via the error.php message parameter.

  • CVE-2019-14259HigAug 1, 2019
    Polycom
    Obi1022
    risk 0.52cvss 8.0epss 0.03

    On the Polycom Obihai Obi1022 VoIP phone with firmware 5.1.11, a command injection (missing input validation) issue in the NTP server IP address field for the "Time Service Settings web" interface allows an authenticated remote attacker in the same network to trigger OS commands…

  • CVE-2019-13572CriAug 1, 2019
    Adenion
    Blog2social
    risk 0.64cvss 9.8epss 0.02

    The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection.

  • CVE-2018-20923MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.40cvss 6.1epss 0.01

    cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).

  • CVE-2018-20922MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.40cvss 6.1epss 0.01

    cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).

  • CVE-2018-20921MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.40cvss 6.1epss 0.01

    cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).

  • CVE-2018-20920MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.40cvss 6.1epss 0.01

    cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).

  • CVE-2018-20919MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.40cvss 6.1epss 0.01

    cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).

  • CVE-2018-20918MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.40cvss 6.1epss 0.01

    cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).

  • CVE-2018-20917MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.36cvss 5.5epss 0.00

    cPanel before 70.0.23 allows any user to disable Solr (SEC-371).

  • CVE-2018-20916MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.4epss 0.01

    cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).

  • CVE-2018-20915MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.35cvss 5.4epss 0.01

    cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).

  • CVE-2018-20914HigAug 1, 2019
    CPanel
    Cpanel
    risk 0.48cvss 7.3epss 0.01

    In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368).

  • CVE-2018-20913MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.32cvss 4.9epss 0.01

    cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364).

  • CVE-2018-20912MedAug 1, 2019
    CPanel
    Cpanel
    risk 0.41cvss 6.3epss 0.01

    cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362).