Product:

Cpanel

(Cpanel)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 415
Date Id Summary Products Score Patch Annotated
2020-09-25 CVE-2020-26106 cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558). Cpanel 7.5
2020-09-25 CVE-2020-26107 cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561). Cpanel 7.5
2020-09-25 CVE-2020-26108 cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488). Cpanel 9.8
2020-09-25 CVE-2020-26109 cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification (SEC-557). Cpanel 7.5
2020-09-25 CVE-2020-26110 cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces (SEC-564). Cpanel 6.1
2020-09-25 CVE-2020-26111 cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface (SEC-566). Cpanel 6.1
2020-09-25 CVE-2020-26112 The email quota cache in cPanel before 90.0.10 allows overwriting of files. Cpanel 7.5
2020-09-25 CVE-2020-26113 cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces (SEC-569). Cpanel 6.1
2020-09-25 CVE-2020-26114 cPanel before 90.0.10 allows self XSS via the Cron Jobs interface (SEC-573). Cpanel 6.1
2020-09-25 CVE-2020-26115 cPanel before 90.0.10 allows self XSS via the Cron Editor interface (SEC-574). Cpanel 6.1