CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- cpanelcPanel before 64.0.21 allows demo users to execute traceroute via api2 (SEC-244).4.3 Medium
- cpanelcPanel before 64.0.21 allows demo accounts to execute code via an ImageManager_dimensions API...6.3 Medium
- cpanelcPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls (SEC-242).6.3 Medium
- cpanelcPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240).4.4 Medium
- cpanelcPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call ...3.5 Low
- advantech webaccess hmi designer, ics-cert advantech webaccess hmi designer +1 moreIn Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR...8.8 High
- cpanelcPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API (SEC-238).7.3 High
- cpanelcPanel before 64.0.21 allows code execution in the context of the root account via a...7.8 High
- cpanelcPanel before 64.0.21 allows code execution by webmail and demo accounts via a store_filter API...8.8 High
- cpanelIn cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234).7.8 High
- cpanelcPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts (CPANEL...7.5 High
- cpanelIn cPanel before 66.0.2, user and group ownership may be incorrectly set when using...4.7 Medium
- cpanelIn cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account...3.3 Low
- imgtech zoneplayer, imgtech co,ltd zinsvx.dll activex control +1 moreZoneplayer ActiveX Remote Code Execution vulnerability8.8 High
- cpanelIn cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log...2.5 Low
- cpanelIn cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289).3.3 Low
- cpanelcPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288).2.7 Low
- cpanelIn cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280).2.5 Low
- cpanelIn cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable...3.3 Low
- cpanelIn cPanel before 66.0.2, domain log files become readable after log processing (SEC-273).3.3 Low
- cpanelIn cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions (SEC...3.3 Low
- cpanelcPanel before 66.0.2 allows demo accounts to create databases and users (SEC-271).3.3 Low
- cpanelcPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269).5.4 Medium
- cpanelcPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266).5.4 Medium
- cpanelcPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265).5.4 Medium
- cpanelcPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263).5.4 Medium
- netapp data ontap operating in 7-mode, data ontap +1 moreData ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account...7.5 High
- netapp data ontap operating in 7-mode, data ontap +1 moreData ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which...7.5 High
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow an unauthorized local...6.2 Medium
- ibm spectrum protect for enterprise resource planning, data protection +1 moreIBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the...5.1 Medium
- sleuthkit the sleuth kitAn issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an out of bounds read on iso9660...9.8 Critical
- sleuthkit the sleuth kit, fedoraproject fedora +1 moreAn issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an...9.8 Critical
- siemens ag power meters series 9410, power meters series 9810, siprotec 5 devices with cpu variants cp200 +2 more +4 moreA vulnerability has been identified in Ethernet plug-in communication modules for SIPROTEC 5...9.8 Critical
- cpanelcPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite...5.5 Medium
- cpanelcPanel before 67.9999.103 allows code execution in the context of the mailman account because of...7.8 High
- cpanelcPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html (SEC-300).7.4 High
- cpanelIn cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount...7.8 High
- redhat openshift container platform, red hat atomic-openshift +1 moreA flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF...4.2 Medium
- cpanelcPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of...2.5 Low
- cpanelThe "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases...6.8 Medium
- redhat 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux server eus +2 moreIt was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17,...7.5 High
- cpanelIn cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases...6.5 Medium
- cpanelIn cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL...6.5 Medium
- cpanelcPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282).5.4 Medium
- cpanelcPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement...4.8 Medium
- open-emr openemrOpenEMR before 5.0.2 allows SQL Injection in interface/forms/eye_mag/save.php.9.8 Critical
- cpanelcPanel before 67.9999.103 allows SQL injection during eximstats processing (SEC-276).7.5 High
- gnucobol project gnucobolGnuCOBOL 2.2 has a heap-based buffer overflow in read_literal in cobc/scanner.l via crafted COBOL...7.8 High
- cpanelcPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess...5.5 Medium
- cpanelcPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD (SEC-341).3.1 Low
- Show moreLoading…