Show filters
425 Total Results
Displaying 41-50 of 425
Sort by:
Attacker Value
Unknown
CVE-2019-20498
Disclosure Date: March 17, 2020 (last updated November 27, 2024)
cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect (SEC-534).
0
Attacker Value
Unknown
CVE-2020-10113
Disclosure Date: March 17, 2020 (last updated February 21, 2025)
cPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515).
0
Attacker Value
Unknown
CVE-2020-10116
Disclosure Date: March 17, 2020 (last updated February 21, 2025)
cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541).
0
Attacker Value
Unknown
CVE-2020-10120
Disclosure Date: March 17, 2020 (last updated November 27, 2024)
cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell (SEC-545).
0
Attacker Value
Unknown
CVE-2019-20492
Disclosure Date: March 17, 2020 (last updated November 27, 2024)
cPanel before 82.0.18 allows authentication bypass because of misparsing of the format of the password file (SEC-516).
0
Attacker Value
Unknown
CVE-2020-10117
Disclosure Date: March 17, 2020 (last updated November 27, 2024)
cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542).
0
Attacker Value
Unknown
CVE-2020-10121
Disclosure Date: March 17, 2020 (last updated February 21, 2025)
cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs (SEC-546).
0
Attacker Value
Unknown
CVE-2020-10119
Disclosure Date: March 17, 2020 (last updated November 27, 2024)
cPanel before 84.0.20 allows a demo account to achieve remote code execution via a cpsrvd rsync shell (SEC-544).
0
Attacker Value
Unknown
CVE-2019-20490
Disclosure Date: March 17, 2020 (last updated November 27, 2024)
cPanel before 82.0.18 allows authentication bypass because webmail usernames are processed inconsistently (SEC-499).
0
Attacker Value
Unknown
CVE-2020-10118
Disclosure Date: March 17, 2020 (last updated November 27, 2024)
cPanel before 84.0.20 allows a demo account to modify files via Branding API calls (SEC-543).
0
