Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Cpanel
(Cpanel)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 402 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2020-03-17 | CVE-2019-20494 | In cPanel before 82.0.18, Cpanel::Rand::Get can produce a predictable series of numbers (SEC-525). | Cpanel | 3.3 | ||
2020-03-17 | CVE-2019-20495 | cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming (SEC-531). | Cpanel | 6.5 | ||
2020-03-17 | CVE-2020-10116 | cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541). | Cpanel | 5.3 | ||
2020-03-17 | CVE-2020-10115 | cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. (SEC-537). | Cpanel | 7.2 | ||
2020-03-17 | CVE-2020-10117 | cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542). | Cpanel | 9.1 | ||
2020-03-17 | CVE-2020-10120 | cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell (SEC-545). | Cpanel | 7.2 | ||
2020-03-17 | CVE-2020-10122 | cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547). | Cpanel | 6.5 | ||
2020-05-11 | CVE-2020-12785 | cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540). | Cpanel | 8.1 | ||
2020-05-11 | CVE-2020-12784 | cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings (SEC-505). | Cpanel | 5.3 | ||
2020-09-25 | CVE-2020-26101 | In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549). | Cpanel | 9.8 |