Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Cpanel
(Cpanel)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 415 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2019-08-05 | CVE-2017-18467 | cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229). | Cpanel | 4.3 | ||
2019-08-05 | CVE-2017-18466 | cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration (SEC-228). | Cpanel | 2.7 | ||
2019-08-05 | CVE-2017-18465 | cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227). | Cpanel | 4.4 | ||
2019-08-05 | CVE-2017-18464 | cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226). | Cpanel | 4.9 | ||
2019-08-05 | CVE-2017-18462 | cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-224). | Cpanel | 7.5 | ||
2019-08-02 | CVE-2017-18432 | In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234). | Cpanel | 7.8 | ||
2019-08-02 | CVE-2017-18428 | In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290). | Cpanel | 2.5 | ||
2019-08-02 | CVE-2017-18427 | In cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289). | Cpanel | 3.3 | ||
2019-08-02 | CVE-2017-18416 | cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update (SEC-303). | Cpanel | 5.5 | ||
2019-08-02 | CVE-2017-18415 | cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302). | Cpanel | 7.8 |