CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- cpanelcPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman...6.3 Medium
- cpanelcPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade (SEC-336).5.4 Medium
- cpanelcPanel before 68.0.15 allows user accounts to be partially created with invalid username formats ...2.7 Low
- cpanelcPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333).7.8 High
- cpanelcPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval...3.7 Low
- cpanelDnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC...3.8 Low
- cpanelcPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330).3.3 Low
- cpanelcPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329).5.5 Medium
- cpanelcPanel before 68.0.15 does not block a username of ssl (SEC-328).2.7 Low
- cpanelcPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327).2.7 Low
- cpanelcPanel before 68.0.15 does not block a username of postmaster, which might allow reception of...2.7 Low
- cpanelcPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple...2.0 Low
- cpanelcPanel before 68.0.15 allows attackers to read backup files because they are world-readable...2.5 Low
- cpanelcPanel before 68.0.15 allows code execution in the context of the root account because of weak...7.8 High
- cpanelcPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318).6.3 Medium
- cpanelcPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask...7.8 High
- cpanelcPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style...7.2 High
- cpanelcPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin ...7.2 High
- cpanelcPanel before 68.0.15 allows unprivileged users to access restricted directories during account...5.5 Medium
- cpanelcPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC...3.8 Low
- cpanelcPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).7.8 High
- cpanelcPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306).2.7 Low
- schismtracker schism trackerAn issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a...7.8 High
- schismtracker schism tracker, opensuse backports, leap +2 moreAn issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow...7.8 High
- editor.md project editor.mdCross-site Scripting in pandao editor.md6.1 Medium
- hp 2910-48g al switch, hp2910al-48g firmware +1 moreA potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016. The...4.8 Medium
- thekelleys dnsmasq, debian linux +1 moreImproper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send...7.5 High
- al-enterprise 8008 firmwareOn the Alcatel-Lucent Enterprise (ALE) 8008 Cloud Edition Deskphone VoIP phone with firmware 1.50...8.0 High
- cpanelcPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains (SEC-118).5.4 Medium
- cpanelcPanel before 57.9999.54 allows demo-mode escape via show_template.stor (SEC-119).8.8 High
- cpanelcPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding...6.5 Medium
- cpanelcPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders ...8.8 High
- cpanelcPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file (SEC-123).9.8 Critical
- cpanelcPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd...6.5 Medium
- cpanelIn cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC...6.5 Medium
- cpanelcPanel before 55.9999.141 allows daemons to access their controlling TTYs (SEC-31).8.8 High
- cpanelIn cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list ...6.5 Medium
- cpanelcPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering...8.8 High
- milkytracker project milkytracker, canonical ubuntu linux, debian linux +2 moreModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap...7.8 High
- milkytracker project milkytracker, canonical ubuntu linux, debian linux +2 moreLoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker 1.02.00 has a stack-based buffer...7.8 High
- happypointcard happypoint, spc cloud happypoint mobile app +1 moreHappypoint mobile application information disclosure vulnerability7.8 High
- 3proxywebadmin.c in 3proxy before 0.8.13 has an out-of-bounds write in the admin interface.5.8 Medium
- cpanelcPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88).5.4 Medium
- cpanelcPanel before 55.9999.141 allows arbitrary code execution in the context of the root account...8.8 High
- cpanelcPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry...9.8 Critical
- cpanelcPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents...8.1 High
- cpanelcPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96).5.4 Medium
- cpanelcPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97).8.8 High
- cpanelcPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form...6.5 Medium
- cpanelcPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100).8.1 High
- Show moreLoading…