CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In August 2019

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1601 CVE-2017-18474 200 +Info 2019-08-05 2019-08-12
6.8
None Remote Low ??? Complete None None
cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases (SEC-201).
1602 CVE-2017-18473 79 XSS 2019-08-05 2019-08-07
3.5
None Remote Medium ??? None Partial None
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199).
1603 CVE-2017-18472 79 XSS 2019-08-05 2019-08-07
4.3
None Remote Medium Not required None Partial None
cPanel before 62.0.4 allows reflected XSS in reset-password interfaces (SEC-198).
1604 CVE-2017-18471 79 XSS 2019-08-05 2019-08-07
3.5
None Remote Medium ??? None Partial None
cPanel before 62.0.4 allows self XSS on the paper_lantern password-change screen (SEC-197).
1605 CVE-2017-18470 255 2019-08-05 2019-08-12
4.0
None Remote Low ??? Partial None None
cPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).
1606 CVE-2017-18469 20 Exec Code 2019-08-05 2019-08-08
6.5
None Remote Low ??? Partial Partial Partial
cPanel before 62.0.17 allows demo accounts to execute code via an NVData_fetchinc API call (SEC-233).
1607 CVE-2017-18468 94 Exec Code 2019-08-05 2019-08-12
6.5
None Remote Low ??? Partial Partial Partial
cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API (SEC-232).
1608 CVE-2017-18467 254 2019-08-05 2019-08-12
4.0
None Remote Low ??? Partial None None
cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229).
1609 CVE-2017-18466 20 2019-08-05 2019-08-12
4.0
None Remote Low ??? None Partial None
cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration (SEC-228).
1610 CVE-2017-18465 20 2019-08-05 2019-08-12
2.1
None Local Low Not required None Partial None
cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227).
1611 CVE-2017-18464 20 2019-08-05 2019-08-12
5.5
None Remote Low ??? None Partial Partial
cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226).
1612 CVE-2017-18463 20 Exec Code 2019-08-02 2019-08-06
7.2
None Local Low Not required Complete Complete Complete
cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path (SEC-225).
1613 CVE-2017-18462 254 Bypass 2019-08-05 2019-08-12
5.0
None Remote Low Not required None Partial None
cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-224).
1614 CVE-2017-18461 20 2019-08-02 2019-08-08
5.0
None Remote Low Not required None Partial None
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename (SEC-223).
1615 CVE-2017-18460 20 Exec Code 2019-08-02 2019-08-07
7.2
None Local Low Not required Complete Complete Complete
cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221).
1616 CVE-2017-18459 20 Exec Code 2019-08-02 2019-08-07
7.2
None Local Low Not required Complete Complete Complete
cPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220).
1617 CVE-2017-18458 20 2019-08-02 2019-08-06
3.6
None Local Low Not required None Partial Partial
cPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219).
1618 CVE-2017-18457 284 2019-08-02 2019-08-09
4.9
None Local Low Not required Complete None None
cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218).
1619 CVE-2017-18456 79 XSS 2019-08-02 2019-08-08
4.3
None Remote Medium Not required None Partial None
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217).
1620 CVE-2017-18455 264 2019-08-02 2019-08-08
4.0
None Remote Low ??? None None Partial
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208).
1621 CVE-2017-18454 79 XSS 2019-08-02 2019-08-06
3.5
None Remote Medium ??? None Partial None
cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262).
1622 CVE-2017-18453 20 2019-08-02 2019-08-06
4.0
None Remote Low ??? None Partial None
cPanel before 64.0.21 does not preserve supplemental groups across account renames (SEC-260).
1623 CVE-2017-18452 20 Exec Code 2019-08-02 2019-08-14
4.6
None Local Low Not required Partial Partial Partial
cPanel before 64.0.21 allows code execution via Rails configuration files (SEC-259).
1624 CVE-2017-18451 264 2019-08-02 2019-08-06
5.0
None Remote Low Not required Partial None None
cPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval upon a cPAddon upgrade (SEC-257).
1625 CVE-2017-18450 264 2019-08-02 2019-08-08
4.4
None Local Medium Not required Partial Partial Partial
cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convert_roundcube_mysql2sqlite (SEC-255).
1626 CVE-2017-18449 20 2019-08-02 2019-08-08
2.1
None Local Low Not required None Partial None
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254).
1627 CVE-2017-18448 22 Dir. Trav. 2019-08-02 2019-08-08
5.0
None Remote Low Not required Partial None None
cPanel before 64.0.21 allows certain file-read operations via a Serverinfo_manpage API call (SEC-252).
1628 CVE-2017-18447 20 Exec Code 2019-08-02 2019-08-08
6.5
None Remote Low ??? Partial Partial Partial
cPanel before 64.0.21 allows demo accounts to execute code via the ClamScanner_getsocket API (SEC-251).
1629 CVE-2017-18446 125 2019-08-02 2019-08-14
6.5
None Remote Low ??? Partial Partial Partial
cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250).
1630 CVE-2017-18445 254 2019-08-02 2019-08-08
4.0
None Remote Low ??? None Partial None
cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249).
1631 CVE-2017-18444 20 Exec Code 2019-08-02 2019-08-08
5.0
None Remote Low Not required None Partial None
cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248).
1632 CVE-2017-18443 20 2019-08-02 2019-08-08
5.0
None Remote Low Not required None Partial None
cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247).
1633 CVE-2017-18442 77 Exec Code 2019-08-02 2019-08-07
5.0
None Remote Low Not required None Partial None
cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246).
1634 CVE-2017-18441 601 2019-08-02 2019-08-07
4.0
None Remote Low ??? None Partial None
cPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245).
1635 CVE-2017-18440 20 2019-08-02 2019-08-06
4.0
None Remote Low ??? Partial None None
cPanel before 64.0.21 allows demo users to execute traceroute via api2 (SEC-244).
1636 CVE-2017-18439 20 Exec Code 2019-08-02 2019-08-09
6.5
None Remote Low ??? Partial Partial Partial
cPanel before 64.0.21 allows demo accounts to execute code via an ImageManager_dimensions API call (SEC-243).
1637 CVE-2017-18438 611 Exec Code 2019-08-02 2019-08-09
6.5
None Remote Low ??? Partial Partial Partial
cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls (SEC-242).
1638 CVE-2017-18437 74 Exec Code 2019-08-02 2019-08-09
3.6
None Local Low Not required Partial Partial None
cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240).
1639 CVE-2017-18436 200 +Info 2019-08-02 2019-08-09
2.7
None Local Network Low ??? Partial None None
cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call (SEC-239).
1640 CVE-2017-18435 434 Exec Code 2019-08-02 2019-08-09
7.5
None Remote Low Not required Partial Partial Partial
cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API (SEC-238).
1641 CVE-2017-18434 20 Exec Code 2019-08-02 2019-08-09
7.2
None Local Low Not required Complete Complete Complete
cPanel before 64.0.21 allows code execution in the context of the root account via a SET_VHOST_LANG_PACKAGE multilang adminbin call (SEC-237).
1642 CVE-2017-18433 20 Exec Code 2019-08-02 2019-08-09
9.0
None Remote Low ??? Complete Complete Complete
cPanel before 64.0.21 allows code execution by webmail and demo accounts via a store_filter API call (SEC-236).
1643 CVE-2017-18432 200 +Info 2019-08-02 2019-08-12
2.1
None Local Low Not required Partial None None
In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234).
1644 CVE-2017-18431 20 2019-08-02 2019-08-13
5.0
None Remote Low Not required None Partial None
cPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts (CPANEL-13941).
1645 CVE-2017-18430 20 2019-08-02 2019-08-08
4.6
None Local Low Not required Partial Partial Partial
In cPanel before 66.0.2, user and group ownership may be incorrectly set when using reassign_post_terminate_cruft (SEC-294).
1646 CVE-2017-18429 254 2019-08-02 2019-09-24
2.1
None Local Low Not required Partial None None
In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination (SEC-291).
1647 CVE-2017-18428 200 +Info 2019-08-02 2019-08-12
1.9
None Local Medium Not required Partial None None
In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290).
1648 CVE-2017-18427 275 2019-08-02 2019-08-12
2.1
None Local Low Not required Partial None None
In cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289).
1649 CVE-2017-18426 532 2019-08-02 2019-08-09
4.0
None Remote Low ??? Partial None None
cPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288).
1650 CVE-2017-18425 275 2019-08-02 2019-08-09
1.9
None Local Medium Not required Partial None None
In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280).
Total number of vulnerabilities : 2004   Page : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 (This Page)34 35 36 37 38 39 40 41
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.