Search Results (Refine Search)
- Keyword (text search): cpe:2.3:a:cpanel:cpanel:69.9999.134:*:*:*:*:*:*:*
- CPE Name Search: true
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2020-26104 |
In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM (SEC-552). Published: September 25, 2020; 2:15:14 AM -0400 |
V4.0:(not available) V3.1: 7.5 HIGH V2.0: 5.0 MEDIUM |
CVE-2020-26103 |
In cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM (SEC-551). Published: September 25, 2020; 2:15:14 AM -0400 |
V4.0:(not available) V3.1: 7.5 HIGH V2.0: 5.0 MEDIUM |
CVE-2020-26102 |
In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM (SEC-550). Published: September 25, 2020; 2:15:13 AM -0400 |
V4.0:(not available) V3.1: 7.5 HIGH V2.0: 5.0 MEDIUM |
CVE-2020-26101 |
In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549). Published: September 25, 2020; 2:15:13 AM -0400 |
V4.0:(not available) V3.1: 9.8 CRITICAL V2.0: 5.0 MEDIUM |
CVE-2020-26100 |
chsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497). Published: September 25, 2020; 2:15:13 AM -0400 |
V4.0:(not available) V3.1: 9.8 CRITICAL V2.0: 7.5 HIGH |
CVE-2020-26099 |
cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism (SEC-491). Published: September 25, 2020; 2:15:13 AM -0400 |
V4.0:(not available) V3.1: 7.5 HIGH V2.0: 5.0 MEDIUM |
CVE-2020-26098 |
cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution (SEC-485). Published: September 25, 2020; 2:15:13 AM -0400 |
V4.0:(not available) V3.1: 9.8 CRITICAL V2.0: 7.5 HIGH |
CVE-2020-10120 |
cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell (SEC-545). Published: March 17, 2020; 11:15:14 AM -0400 |
V4.0:(not available) V3.1: 7.2 HIGH V2.0: 9.0 HIGH |
CVE-2020-10119 |
cPanel before 84.0.20 allows a demo account to achieve remote code execution via a cpsrvd rsync shell (SEC-544). Published: March 17, 2020; 11:15:13 AM -0400 |
V4.0:(not available) V3.1: 9.8 CRITICAL V2.0: 7.5 HIGH |
CVE-2019-17380 |
cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface (SEC-528). Published: October 09, 2019; 12:15:15 PM -0400 |
V4.0:(not available) V3.1: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
CVE-2018-20935 |
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412). Published: August 01, 2019; 12:15:14 PM -0400 |
V4.0:(not available) V3.0: 5.4 MEDIUM V2.0: 3.5 LOW |
CVE-2018-20934 |
cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411). Published: August 01, 2019; 12:15:14 PM -0400 |
V4.0:(not available) V3.0: 6.5 MEDIUM V2.0: 6.4 MEDIUM |
CVE-2018-20933 |
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410). Published: August 01, 2019; 12:15:14 PM -0400 |
V4.0:(not available) V3.0: 5.4 MEDIUM V2.0: 3.5 LOW |
CVE-2018-20932 |
cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406). Published: August 01, 2019; 12:15:13 PM -0400 |
V4.0:(not available) V3.0: 2.7 LOW V2.0: 4.0 MEDIUM |
CVE-2018-20931 |
cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405). Published: August 01, 2019; 12:15:13 PM -0400 |
V4.0:(not available) V3.0: 6.3 MEDIUM V2.0: 6.5 MEDIUM |
CVE-2018-20930 |
cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401). Published: August 01, 2019; 12:15:13 PM -0400 |
V4.0:(not available) V3.0: 6.5 MEDIUM V2.0: 6.4 MEDIUM |
CVE-2018-20929 |
cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392). Published: August 01, 2019; 12:15:13 PM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 5.8 MEDIUM |
CVE-2018-20928 |
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391). Published: August 01, 2019; 12:15:13 PM -0400 |
V4.0:(not available) V3.0: 6.1 MEDIUM V2.0: 4.3 MEDIUM |
CVE-2018-20927 |
cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382). Published: August 01, 2019; 12:15:13 PM -0400 |
V4.0:(not available) V3.0: 3.8 LOW V2.0: 2.1 LOW |
CVE-2018-20926 |
cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380). Published: August 01, 2019; 12:15:13 PM -0400 |
V4.0:(not available) V3.0: 6.7 MEDIUM V2.0: 7.2 HIGH |