Skip to contentCpanel vulnerabilities
Newest
- cpanelcPanel before 68.0.15 does not block a username of ssl (SEC-328).CVE-2017-183952.7 Low
- cpanelcPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327).CVE-2017-183942.7 Low
- cpanelcPanel before 68.0.15 does not block a username of postmaster, which might allow reception of...CVE-2017-183932.7 Low
- cpanelcPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple...CVE-2017-183922.0 Low
- cpanelcPanel before 68.0.15 allows attackers to read backup files because they are world-readable...CVE-2017-183912.5 Low
- cpanelcPanel before 68.0.15 allows code execution in the context of the root account because of weak...CVE-2017-183907.8 High
- cpanelcPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318).CVE-2017-183896.3 Medium
- cpanelcPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask...CVE-2017-183887.8 High
- cpanelcPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style...CVE-2017-183877.2 High
- cpanelcPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin ...CVE-2017-183867.2 High
- cpanelcPanel before 68.0.15 allows unprivileged users to access restricted directories during account...CVE-2017-183855.5 Medium
- cpanelcPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC...CVE-2017-183843.8 Low
- cpanelcPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).CVE-2017-183837.8 High
- cpanelcPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306).CVE-2017-183822.7 Low
- cpanelcPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains (SEC-118).CVE-2016-108135.4 Medium
- cpanelcPanel before 57.9999.54 allows demo-mode escape via show_template.stor (SEC-119).CVE-2016-108148.8 High
- cpanelcPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding...CVE-2016-108156.5 Medium
- cpanelcPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders ...CVE-2016-108168.8 High
- cpanelcPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file (SEC-123).CVE-2016-108179.8 Critical
- cpanelcPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd...CVE-2016-108186.5 Medium
- cpanelIn cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC...CVE-2016-108196.5 Medium
- cpanelcPanel before 55.9999.141 allows daemons to access their controlling TTYs (SEC-31).CVE-2016-108208.8 High
- cpanelIn cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list ...CVE-2016-108216.5 Medium
- cpanelcPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering...CVE-2016-108268.8 High
- cpanelcPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88).CVE-2016-108225.4 Medium
- cpanelcPanel before 55.9999.141 allows arbitrary code execution in the context of the root account...CVE-2016-108238.8 High
- cpanelcPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry...CVE-2016-108249.8 Critical
- cpanelcPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents...CVE-2016-108258.1 High
- cpanelcPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96).CVE-2016-108275.4 Medium
- cpanelcPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97).CVE-2016-108288.8 High
- cpanelcPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form...CVE-2016-108296.5 Medium
- cpanelcPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100).CVE-2016-108308.1 High
- cpanelcPanel before 55.9999.141 does not perform as two-factor authentication check when possessing...CVE-2016-108317.2 High
- cpanelcPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389).CVE-2018-209536.1 Medium
- cpanelcPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC...CVE-2018-209526.5 Medium
- cpanelcPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387).CVE-2018-209516.1 Medium
- cpanelcPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386).CVE-2018-209506.1 Medium
- cpanelcPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385).CVE-2018-209496.1 Medium
- cpanelcPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383).CVE-2018-209486.1 Medium
- cpanelcPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).CVE-2018-209475.5 Medium
- cpanelcPanel before 68.0.27 allows attackers to read zone information because a world-readable archive...CVE-2018-209463.3 Low
- cpanelbin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).CVE-2018-209455.7 Medium
- cpanelcPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a...CVE-2018-209443.3 Low
- cpanelcPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging (SEC-102).CVE-2016-108326.5 Medium
- cpanelcPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval...CVE-2018-209432.5 Low
- cpanelcPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval...CVE-2018-209422.5 Low
- cpanelcPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin (SEC-349).CVE-2018-209415.6 Medium
- cpanelcPanel before 55.9999.141 mishandles username-based blocking for PRE requests in cPHulkd (SEC-104).CVE-2016-108337.5 High
- cpanelcPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval...CVE-2018-209403.3 Low
- cpanelcPanel before 68.0.27 allows a user to discover contents of directories (that are not owned by...CVE-2018-209393.3 Low
- Show moreLoading…