Page 9 of 186 results (0.025 seconds)

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0

CVE-2018-20953

https://notcve.org/view.php?id=CVE-2018-20953

01 Aug 2019 — cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389). cPanel anterior a versión 68.0.27, permite un ataque de tipo XSS propio en la interfaz listips de WHM. (SEC-389). • https://documentation.cpanel.net/display/CL/68+Change+Log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2018-20952

https://notcve.org/view.php?id=CVE-2018-20952

01 Aug 2019 — cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC-388). cPanel anterior a versión 68.0.27, permite un ataque de tipo XSS propio en la interfaz listips de WHM. (SEC-389). • https://documentation.cpanel.net/display/CL/68+Change+Log • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0

CVE-2018-20951

https://notcve.org/view.php?id=CVE-2018-20951

01 Aug 2019 — cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387). cPanel anterior a versión 68.0.27, permite un ataque de tipo XSS propio en Spamd Startup Config de WHM. (SEC-387). • https://documentation.cpanel.net/display/CL/68+Change+Log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0

CVE-2018-20950

https://notcve.org/view.php?id=CVE-2018-20950

01 Aug 2019 — cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386). cPanel anterior a versión 68.0.27, permite un ataque de tipo XSS auto almacenado en Account Transfer de WHM. (SEC-386). • https://documentation.cpanel.net/display/CL/68+Change+Log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0

CVE-2018-20949

https://notcve.org/view.php?id=CVE-2018-20949

01 Aug 2019 — cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385). cPanel anterior a versión 68.0.27, permite un ataque de tipo XSS propio en Include Editor de Apache Configuration de WHM. (SEC-385). • https://documentation.cpanel.net/display/CL/68+Change+Log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0

CVE-2018-20948

https://notcve.org/view.php?id=CVE-2018-20948

01 Aug 2019 — cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383). cPanel anterior a versión 68.0.27, permite un ataque de tipo XSS propio en funcionalidad Backup Restoration de cPanel (SEC-383). • https://documentation.cpanel.net/display/CL/68+Change+Log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2018-20947

https://notcve.org/view.php?id=CVE-2018-20947

01 Aug 2019 — cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356). cPanel anterior a versión 68.0.27, permite determinadas operaciones de escritura de archivo por medio del script telnetcrt (SEC-356). • https://documentation.cpanel.net/display/CL/68+Change+Log • CWE-668: Exposure of Resource to Wrong Sphere •

CVSS: 3.3EPSS: 0%CPEs: 3EXPL: 0

CVE-2018-20946

https://notcve.org/view.php?id=CVE-2018-20946

01 Aug 2019 — cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archive_sync_zones script (SEC-355). cPanel anterior a versión 68.0.27, permite a los atacantes leer información de la zona porque un archivo confiable para todo el mundo es creado mediante el script archive_sync_zones. (SEC-355) • https://documentation.cpanel.net/display/CL/68+Change+Log • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.9EPSS: 0%CPEs: 3EXPL: 0

CVE-2018-20945

https://notcve.org/view.php?id=CVE-2018-20945

01 Aug 2019 — bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354). En el archivo bin/csvprocess en cPanel anterior a versión 68.0.27, permite operaciones de archivos no seguras. (SEC-354). • https://documentation.cpanel.net/display/CL/68+Change+Log • CWE-285: Improper Authorization •

CVSS: 3.3EPSS: 0%CPEs: 3EXPL: 0

CVE-2018-20944

https://notcve.org/view.php?id=CVE-2018-20944

01 Aug 2019 — cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test (SEC-353). cPanel anterior a versión 68.0.27, permite a los atacantes leer una copia del archivo httpd.conf que se crea durante una prueba de sintaxis (SEC-353). • https://documentation.cpanel.net/display/CL/68+Change+Log • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •