CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- cpanelcPanel before 55.9999.141 does not perform as two-factor authentication check when possessing...7.2 High
- cpanelcPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389).6.1 Medium
- cpanelcPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC...6.5 Medium
- cpanelcPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387).6.1 Medium
- cpanelcPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386).6.1 Medium
- cpanelcPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385).6.1 Medium
- cpanelcPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383).6.1 Medium
- cpanelcPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).5.5 Medium
- cpanelcPanel before 68.0.27 allows attackers to read zone information because a world-readable archive...3.3 Low
- cpanelbin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).5.7 Medium
- cpanelcPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a...3.3 Low
- cpanelcPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging (SEC-102).6.5 Medium
- cpanelcPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval...2.5 Low
- cpanelcPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval...2.5 Low
- cpanelcPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin (SEC-349).5.6 Medium
- cpanelcPanel before 55.9999.141 mishandles username-based blocking for PRE requests in cPHulkd (SEC-104).7.5 High
- cpanelcPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval...3.3 Low
- cpanelcPanel before 68.0.27 allows a user to discover contents of directories (that are not owned by...3.3 Low
- cpanelcPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls ...2.7 Low
- cpanelcPanel before 55.9999.141 allows account-suspension bypass via ftp (SEC-105).8.8 High
- cpanelcPanel before 68.0.27 does not validate database and dbuser names during renames (SEC-321).4.3 Medium
- cpanelcPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging (SEC-107).4.3 Medium
- cpanelcPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf (SEC-308).3.3 Low
- opencv, debian linux +1 moreNULL Pointer Dereference in OpenCV.7.5 High
- opencv, opensuse leap +1 moreOut-of-bounds Read and Out-of-bounds Write in OpenCV7.5 High
- opencvOut-of-bounds Read in OpenCV8.2 High
- cpanelcPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav...6.5 Medium
- cpanelcPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412).5.4 Medium
- cpanelcPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned...6.5 Medium
- cpanelcPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410).5.4 Medium
- cpanelcPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406).2.7 Low
- cpanelcPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405).6.3 Medium
- cpanelcPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled ...6.5 Medium
- cpanelcPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46).7.5 High
- cpanelcPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script (SEC-70).6.5 Medium
- cpanelcPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).6.1 Medium
- cpanelcPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71).8.1 High
- cpanelcPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).8.8 High
- cpanelThe bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).5.3 Medium
- cpanelcPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl ...6.5 Medium
- cpanelcPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76).8.1 High
- cpanelThe chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77).6.5 Medium
- cpanelcPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts...8.1 High
- cpanelcPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube...8.1 High
- cpanelcPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts...8.1 High
- cpanelcPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81).7.2 High
- cpanelcPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82).6.5 Medium
- gnucobol project gnucobolGnuCOBOL 2.2 has a buffer overflow in cb_evaluate_expr in cobc/field.c via crafted COBOL source...7.8 High
- cpanelcPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392).6.1 Medium
- cpanelcPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).3.8 Low
- Show moreLoading…