CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- cpanelcPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461).6.1 Medium
- cpanelcPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field (SEC-459).6.1 Medium
- cpanelcPanel before 76.0.8 allows a persistent Virtual FTP accounts after removal of its associated...6.5 Medium
- cpanelcPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list...9.8 Critical
- cpanelIn cPanel before 78.0.2, a Userdata cache temporary file can conflict with domains (SEC-478).3.3 Low
- cpanelcPanel before 78.0.2 allows certain file-write operations as shared users during connection...4.3 Medium
- cpanelMaketext in cPanel before 78.0.2 allows format-string injection in the DCV check_domains_via_dns...3.3 Low
- cpanelcPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV...5.3 Medium
- cpanelMaketext in cPanel before 78.0.2 allows format-string injection in the Email store_filter UAPI ...3.3 Low
- cpanelcPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin (SEC-466).5.5 Medium
- cpanelcPanel before 78.0.2 allows a demo account to link with an OpenID provider (SEC-460).4.3 Medium
- cpanelcPanel before 78.0.2 reveals internal data to OpenID providers (SEC-415).2.7 Low
- cpanelcPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing (SEC-493).6.1 Medium
- cpanelcPanel before 78.0.18 allows demo accounts to execute code via securitypolicy.cg (SEC-487).8.8 High
- cpanelcPanel before 78.0.18 allows certain file-read operations in the context of the root account via...5.5 Medium
- cpanelcPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing (SEC...4.3 Medium
- cpanelcPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp (SEC-481).3.3 Low
- cpanelcPanel before 78.0.18 allows code execution via an addforward API1 call (SEC-480).8.8 High
- cpanelcPanel before 78.0.18 allows local users to escalate to root access because of userdata cache...7.8 High
- cpanelThe SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the...7.1 High
- cpanelcPanel before 80.0.5 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util...8.8 High
- cpanelcPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call...5.3 Medium
- cpanelAPI Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data (SEC-495).3.3 Low
- cpanelcPanel before 80.0.5 uses world-readable permissions for the Queueprocd log (SEC-494).3.3 Low
- cpanelcPanel before 80.0.5 allows unsafe file operations in the context of the root account via the...5.5 Medium
- cpanelcPanel before 80.0.5 allows local code execution in the context of a different cPanel account...5.3 Medium
- cpanelcPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI...8.8 High
- cpanelcPanel before 76.0.8 has an open redirect when resetting connections (SEC-462).6.1 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreAll builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to...7.4 High
- ibm daeja viewoneIBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6 is vulnerable to an XML...7.1 High
- ibm websphere application serverIBM WebSphere Application Server - Liberty Admin Center could allow a remote attacker to hijack...5.4 Medium
- ibm i2 analyst's notebook, i2 intelligent analysis platform +1 moreIBM i2 Intelligent Analyis Platform 9.0.0 through 9.1.1 is vulnerable to an XML External Entity...7.1 High
- cpanelcPanel before 82.0.2 does not properly enforce Reseller package creation ACLs (SEC-514).3.3 Low
- cpanelcPanel before 82.0.2 has stored XSS in the WHM Modify Account interface (SEC-512).5.4 Medium
- cpanelcPanel before 82.0.2 allows local users to discover the MySQL root password (SEC-510).7.8 High
- cpanelcPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled ...7.5 High
- cpanelcPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates (SEC-506).6.1 Medium
- openmpt libopenmptlibopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento...7.5 High
- cpanelcPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface (SEC-504).5.4 Medium
- freetypeIn FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function...9.8 Critical
- edx edx-platformedx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in...7.5 High
- custom simple rss project simple rssA CSRF vulnerability in Settings form in the Custom Simple Rss plugin 2.0.6 for WordPress allows...6.5 Medium
- wpfastestcache wp fastest cacheThe WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache...9.1 Critical
- gnu binutils, canonical ubuntu linux, netapp hci management node +2 more +4 moreapply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows...5.5 Medium
- libav, debian linux +1 moreAn issue was discovered in Libav 12.3. Division by zero in range_decode_culshift in libavcodec...6.5 Medium
- libav, debian linux +1 moreIn mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek...6.5 Medium
- libavAn issue was discovered in Libav 12.3. An access violation allows remote attackers to cause a...6.5 Medium
- fasterxml jackson-databind, apache drill, debian linux +15 more +17 moreDeserialization of untrusted data in FasterXML jackson-databind7.5 High
authdAlmaLinuxauthd bug fix updateNo score- google chromeIncorrect font handling in autofill in Google Chrome prior to 75.0.3770.142 allowed a remote...6.5 Medium
- Show moreLoading…