Cpanel

CVEs (413)

• CVE-2016-10838Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script (SEC-70).

• CVE-2018-20928Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).

• CVE-2016-10839Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71).

• CVE-2016-10840Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.02

  cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).

• CVE-2016-10841Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).

• CVE-2016-10842Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74).

• CVE-2016-10843Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76).

• CVE-2016-10844Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  The chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77).

• CVE-2016-10845Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78).

• CVE-2016-10846Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79).

• CVE-2016-10847Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80).

• CVE-2016-10848Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81).

• CVE-2016-10849Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82).

• CVE-2018-20929Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392).

• CVE-2018-20927Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.00

  cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).

• CVE-2018-20926Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.00

  cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380).

• CVE-2018-20925Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.00

  cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379).

• CVE-2018-20924Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).

• CVE-2016-10850Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.02

  cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC-83).

• CVE-2018-20923Aug 1, 2019
  CPanel

  Cpanel
  risk 0.00cvss —epss 0.01

  cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).