CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- cpanelcPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface ...6.7 Medium
- cpanelcPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload...6.7 Medium
- cpanelcPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads...5.5 Medium
- cpanelcPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC...8.8 High
- cpanelcPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).6.1 Medium
- cpanelcPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).6.1 Medium
- cpanelcPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).6.1 Medium
- cpanelcPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).6.1 Medium
- cpanelcPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).6.1 Medium
- cpanelcPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface (SEC-84).5.4 Medium
- cpanelcPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).6.1 Medium
- cpanelcPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85).6.5 Medium
- cpanelcPanel before 70.0.23 allows any user to disable Solr (SEC-371).5.5 Medium
- cpanelcPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).5.4 Medium
- cpanelcPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).5.4 Medium
- cpanelcPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface (SEC-86).5.4 Medium
- cpanelIn cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files ...7.3 High
- polycom obihai obi1022 firmwareOn the Polycom Obihai Obi1022 VoIP phone with firmware 5.1.11, a command injection (missing input...8.0 High
- cpanelcPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface (SEC-87).5.4 Medium
- cpanelcPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi...4.9 Medium
- cpanelcPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362).6.3 Medium
- cpanelcPanel before 11.54.0.4 allows unauthenticated arbitrary code execution via cpsrvd (SEC-91).9.8 Critical
- cpanelcPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of...7.2 High
- cpanelcPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds (SEC-29).6.5 Medium
- cpanelcPanel before 11.54.0.0 allows a bypass of the e-mail sending limit (SEC-60).6.5 Medium
- cpanelcPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry...9.8 Critical
- cpanelcPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65).8.1 High
- adenion blog2socialThe Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection.9.8 Critical
- cpanelcPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API (SEC-66).8.1 High
- cpanelcPanel before 11.52.0.13 does not prevent arbitrary file-read operations via...7.5 High
- cpanelcPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357).6.1 Medium
- cpanelcPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups ...7.1 High
- cpanelcPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template...5.5 Medium
- cpanelcPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432).4.3 Medium
- cpanelcPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature...4.3 Medium
- cpanelcPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature...5.4 Medium
- cpanelcPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature...4.3 Medium
- cpanelcPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421).6.1 Medium
- windu cmsWindu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account.8.8 High
- cpanelcPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV...5.5 Medium
- cpanelcPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400).6.1 Medium
- windu cmsWindu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or...6.1 Medium
- zurmoZurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATH_INFO.6.1 Medium
- testlinkTestLink 1.9.19 has XSS via the error.php message parameter.6.1 Medium
- cpanelcPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399).6.1 Medium
- cpanelcPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398).6.1 Medium
- cpanelcPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396).4.3 Medium
- cpanelcPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation...2.8 Low
- cpanelcPanel before 71.9980.37 allows code injection in the WHM cPAddons interface (SEC-394).3.9 Low
- apache solr, debian linux +1 moreXML External Entity (XXE) Injection in Apache Solr7.2 High
- Show moreLoading…