CVE Vulnerability

Home » CVE’s

CVE’s

CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
CVE-2018-20870
2019-07-31
N/A
5.5 MEDIUM
The WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467).
CVE-2018-2087
2019-01-22
N/A
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE-2018-20869
2019-07-31
N/A
7.8 HIGH
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin (SEC-465).
CVE-2018-20868
2019-07-30
N/A
6.1 MEDIUM
cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464).
CVE-2018-20867
2019-07-30
N/A
6.1 MEDIUM
cPanel before 76.0.8 has an open redirect when resetting connections (SEC-462).
CVE-2018-20866
2019-07-30
N/A
6.1 MEDIUM
cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461).
CVE-2018-20865
2019-07-30
N/A
6.1 MEDIUM
cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field (SEC-459).
CVE-2018-20864
2019-07-31
N/A
6.5 MEDIUM
cPanel before 76.0.8 allows a persistent Virtual FTP accounts after removal of its associated domain (SEC-454).
CVE-2018-20863
2019-07-31
N/A
9.8 CRITICAL
cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments (SEC-452).
CVE-2018-20862
2020-08-24
N/A
7.8 HIGH
cPanel before 76.0.8 unsafely performs PostgreSQL password changes (SEC-366).
1 … 1,993 1,994 1,995 1,996 1,997 … 11,258