Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10764 State: PUBLISHED Published: 2019-07-27T21:38:43 Last Updated: 2024-08-06T03:38:55.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspi_setup_flash() function. There are CQSPI_MAX_CHIPSELECT elements in the ->f_pdata array so the ">" should be ">=" instead. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/193e87143c290ec16838f5368adc0e0bc94eb931 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=193e87143c290ec16838f5368adc0e0bc94eb931 - https://mirrors.edge.kernel.org/pu
x/kernel/git/torvalds/linux.git/commit/?id=193e87143c290ec16838f5368adc0e0bc94eb931 - https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6 - https://support.f5.com/csp/article/K24444495 - https://support.f5.com/csp/article/K24444495?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2016-10765 State: PUBLISHED Published: 2019-07-29T16:10:32 Last Updated: 2024-08-06T03:38:55.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: edx-platform before 2016-06-10 allows account activation with a spoofed e-mail address. Additional Analyst Notes: - CVE Program Container: References: - https://open.edx.org/announcements/security-alert-account-activation-unverified-email/
CVE ID: CVE-2016-10766 State: PUBLISHED Published: 2019-07-29T16:12:06 Last Updated: 2024-08-06T03:38:55.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: edx-platform before 2016-06-06 allows CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://open.edx.org/announcements/cross-site-request-forgery-bug-edx-lms/ - https://github.com/edx/edx-platform/commit/d54f79f5bf3e1af17063937df1abc0026843412d.patch
CVE ID: CVE-2016-10767 State: PUBLISHED Published: 2019-08-05T12:51:51 Last Updated: 2024-08-06T03:38:55.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10768 State: PUBLISHED Published: 2019-08-05T12:52:34 Last Updated: 2024-08-06T03:38:55.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC-161). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10769 State: PUBLISHED Published: 2019-08-05T12:53:16 Last Updated: 2024-08-06T03:38:55.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows an open redirect via /cgi-sys/FormMail-clone.cgi (SEC-162). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10770 State: PUBLISHED Published: 2019-08-05T12:54:14 Last Updated: 2024-08-06T03:38:55.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows arbitrary file-overwrite operations during a Roundcube update (SEC-164). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10771 State: PUBLISHED Published: 2019-08-05T12:55:04 Last Updated: 2024-08-06T03:38:55.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows file-create and file-chmod operations during ModSecurity Audit logfile processing (SEC-165). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10772 State: PUBLISHED Published: 2019-08-05T12:55:48 Last Updated: 2024-08-06T03:38:55.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang adminbin (SEC-168). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10773 State: PUBLISHED Published: 2019-08-05T12:56:27 Last Updated: 2024-08-06T03:38:55.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10774 State: PUBLISHED Published: 2019-08-05T12:57:28 Last Updated: 2024-08-06T03:38:55.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows self XSS in the tail_ea4_migration.cgi interface (SEC-172). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10775 State: PUBLISHED Published: 2019-08-05T12:58:08 Last Updated: 2024-08-06T03:38:55.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows arbitrary file-chown operations via reassign_post_terminate_cruft (SEC-173). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10776 State: PUBLISHED Published: 2019-08-06T12:47:51 Last Updated: 2024-08-06T03:38:55.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination (SEC-174). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10777 State: PUBLISHED Published: 2019-08-06T12:49:30 Last Updated: 2024-08-06T03:38:55.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover_host (SEC-177). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10778 State: PUBLISHED Published: 2019-08-06T12:48:40 Last Updated: 2024-08-06T03:38:55.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows self stored XSS in the listftpstable API (SEC-178). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10779 State: PUBLISHED Published: 2019-08-06T12:50:16 Last Updated: 2024-08-06T03:38:55.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows stored XSS in api1_listautoresponders (SEC-179). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10780 State: PUBLISHED Published: 2019-08-06T12:52:01 Last Updated: 2024-08-06T03:38:55.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows stored XSS in the ftp_sessions API (SEC-180). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10781 State: PUBLISHED Published: 2019-08-06T12:52:51 Last Updated: 2024-08-06T03:38:55.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows self XSS in the UI_confirm API (SEC-180). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10782 State: PUBLISHED Published: 2019-08-06T12:53:43 Last Updated: 2024-08-06T03:38:55.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs (SEC-181). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10783 State: PUBLISHED Published: 2019-08-06T12:54:26 Last Updated: 2024-08-06T03:38:55.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows self stored XSS in SSL_listkeys (SEC-182). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10784 State: PUBLISHED Published: 2019-08-06T12:55:08 Last Updated: 2024-08-06T03:38:55.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows self XSS in the alias upload interface (SEC-184). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10785 State: PUBLISHED Published: 2019-08-06T12:55:51 Last Updated: 2024-08-06T03:38:55.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows attackers to discover file contents during file copy operations (SEC-185). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10786 State: PUBLISHED Published: 2019-08-06T12:56:49 Last Updated: 2024-08-06T03:38:55.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC-186). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10787 State: PUBLISHED Published: 2019-08-06T12:57:40 Last Updated: 2024-08-06T03:38:55.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries (SEC-187). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10788 State: PUBLISHED Published: 2019-08-06T12:58:35 Last Updated: 2024-08-06T03:38:55.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin (SEC-188). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10789 State: PUBLISHED Published: 2019-08-06T12:59:20 Last Updated: 2024-08-06T03:38:55.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler (SEC-191). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10790 State: PUBLISHED Published: 2019-08-06T13:00:07 Last Updated: 2024-08-06T03:38:55.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10791 State: PUBLISHED Published: 2019-08-06T13:01:18 Last Updated: 2024-08-06T03:38:55.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are impossible (CPANEL-9559). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10792 State: PUBLISHED Published: 2019-08-06T13:02:45 Last Updated: 2024-08-06T03:38:55.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives (SEC-141). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10793 State: PUBLISHED Published: 2019-08-06T13:04:54 Last Updated: 2024-08-06T03:38:55.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF scripts (SEC-152). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10794 State: PUBLISHED Published: 2019-08-06T13:05:39 Last Updated: 2024-08-06T03:38:56.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10795 State: PUBLISHED Published: 2019-08-06T13:06:35 Last Updated: 2024-08-06T03:38:56.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 59.9999.145 allows stored XSS in the WHM tail_upcp2.cgi interface (SEC-156). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/60+Change+Log
CVE ID: CVE-2016-10796 State: PUBLISHED Published: 2019-08-06T13:08:04 Last Updated: 2024-08-06T03:38:55.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10797 State: PUBLISHED Published: 2019-08-06T13:08:57 Last Updated: 2024-08-06T03:38:55.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains (SEC-133). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10798 State: PUBLISHED Published: 2019-08-07T12:20:34 Last Updated: 2024-08-06T03:38:55.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 58.0.4 allows a file-ownership change (to nobody) via rearrangeacct (SEC-134). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10799 State: PUBLISHED Published: 2019-08-07T12:21:21 Last Updated: 2024-08-06T03:38:55.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation (SEC-137). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10800 State: PUBLISHED Published: 2019-08-07T12:22:10 Last Updated: 2024-08-06T03:38:56.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10801 State: PUBLISHED Published: 2019-08-07T12:23:00 Last Updated: 2024-08-06T03:38:55.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 58.0.4 has improper session handling for shared users (SEC-139). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10802 State: PUBLISHED Published: 2019-08-07T12:23:47 Last Updated: 2024-08-06T03:38:56.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler (SEC-142). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10803 State: PUBLISHED Published: 2019-08-07T12:24:50 Last Updated: 2024-08-06T03:38:55.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 57.9999.105 allows newline injection via LOC records (CPANEL-6923). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10804 State: PUBLISHED Published: 2019-08-07T12:26:13 Last Updated: 2024-08-06T03:38:55.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore (SEC-58). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10805 State: PUBLISHED Published: 2019-08-07T12:27:17 Last Updated: 2024-08-06T03:38:55.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-109). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10806 State: PUBLISHED Published: 2019-08-07T12:28:12 Last Updated: 2024-08-06T03:38:55.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page (SEC-110). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10807 State: PUBLISHED Published: 2019-08-07T12:29:00 Last Updated: 2024-08-06T03:38:55.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost (SEC-112). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10808 State: PUBLISHED Published: 2019-08-07T12:29:46 Last Updated: 2024-08-06T03:38:55.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs (SEC-113). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10809 State: PUBLISHED Published: 2019-08-07T12:30:46 Last Updated: 2024-08-06T03:38:55.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process (SEC-114). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10810 State: PUBLISHED Published: 2019-08-07T12:31:35 Last Updated: 2024-08-06T03:38:55.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 57.9999.54, /scripts/maildir_converter exposed a TTY to an unprivileged process (SEC-115). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10811 State: PUBLISHED Published: 2019-08-07T12:32:33 Last Updated: 2024-08-06T03:38:55.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs (SEC-116). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10812 State: PUBLISHED Published: 2019-08-07T12:33:23 Last Updated: 2024-08-06T03:38:55.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs (SEC-117). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10813 State: PUBLISHED Published: 2019-08-01T18:54:18 Last Updated: 2024-08-06T03:38:55.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains (SEC-118). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10814 State: PUBLISHED Published: 2019-08-01T18:53:49 Last Updated: 2024-08-06T03:38:56.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 57.9999.54 allows demo-mode escape via show_template.stor (SEC-119). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10815 State: PUBLISHED Published: 2019-08-01T18:53:15 Last Updated: 2024-08-06T03:38:56.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs (SEC-120). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10816 State: PUBLISHED Published: 2019-08-01T18:52:32 Last Updated: 2024-08-06T03:38:55.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders (SEC-121). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10817 State: PUBLISHED Published: 2019-08-01T18:51:53 Last Updated: 2024-08-06T03:38:55.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file (SEC-123). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10818 State: PUBLISHED Published: 2019-08-01T18:43:03 Last Updated: 2024-08-06T03:38:55.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup (SEC-124). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10819 State: PUBLISHED Published: 2019-08-01T18:31:07 Last Updated: 2024-08-06T03:38:55.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/58+Change+Log
CVE ID: CVE-2016-10820 State: PUBLISHED Published: 2019-08-01T18:30:32 Last Updated: 2024-08-06T03:38:55.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 55.9999.141 allows daemons to access their controlling TTYs (SEC-31). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/56+Change+Log
CVE ID: CVE-2016-10821 State: PUBLISHED Published: 2019-08-01T18:29:56 Last Updated: 2024-08-06T03:38:56.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list (SEC-75). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/56+Change+Log
CVE ID: CVE-2016-10822 State: PUBLISHED Published: 2019-08-01T16:45:26 Last Updated: 2024-08-06T03:38:55.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/56+Change+Log
CVE ID: CVE-2016-10823 State: PUBLISHED Published: 2019-08-01T16:42:57 Last Updated: 2024-08-06T03:38:55.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/56+Change+Log