Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-20843 State: PUBLISHED Published: 2019-06-24T16:06:38.000Z Last Updated: 2025-05-30T19:39:20.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://usn.ubuntu.com/4040-1/ - https://usn.ubuntu.com/4040-2/ - https://www.debian.org/security/2019/dsa-4472 - https://seclists.org/bugtraq/2019/Jun/39 - https://lists.debian.org/debian-l
s://www.debian.org/security/2019/dsa-4472 - https://seclists.org/bugtraq/2019/Jun/39 - https://lists.debian.org/debian-lts-announce/2019/06/msg00028.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CEJJSQSG3KSUQY4FPVHZ7ZTT7FORMFVD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IDAUGEB3TUP6NEKJDBUBZX7N5OAUOOOK/ - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00039.html - https://security.gentoo.org/glsa/201911-08 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/libexpat/libexpat/issue
ts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/libexpat/libexpat/issues/186 - https://github.com/libexpat/libexpat/pull/262 - https://github.com/libexpat/libexpat/pull/262/commits/11f8838bf99ea0a6f0b76f9760c43704d00c4ff6 - https://github.com/libexpat/libexpat/blob/R_2_2_7/expat/Changes - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5226 - https://security.netapp.com/advisory/ntap-20190703-0001/ - https://support.f5.com/csp/article/K51011533 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.tenable.com/security/tns-2021-11
CVE ID: CVE-2018-20845 State: PUBLISHED Published: 2019-06-26T17:07:27 Last Updated: 2024-08-05T12:12:28.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/pull/1168/commits/c5bd64ea146162967c29bd2af0cbb845ba3eaaaf - http://www.securityfocus.com/bid/108921
CVE ID: CVE-2018-20846 State: PUBLISHED Published: 2019-06-26T17:07:35 Last Updated: 2024-08-05T12:12:28.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/pull/1168/commits/c277159986c80142180fbe5efb256bbf3bdf3edc - http://www.securityfocus.com/bid/108921
CVE ID: CVE-2018-20847 State: PUBLISHED Published: 2019-06-26T17:07:43 Last Updated: 2024-08-05T12:12:28.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/pull/1168/commits/c58df149900df862806d0e892859b41115875845 - https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949 - https://github.com/uclouvain/openjpeg/issues/431 - http://www.securityfocus.com/bid/108921 - https://li
6b9a9883c57949 - https://github.com/uclouvain/openjpeg/issues/431 - http://www.securityfocus.com/bid/108921 - https://lists.debian.org/debian-lts-announce/2019/07/msg00010.html
CVE ID: CVE-2018-20848 State: PUBLISHED Published: 2019-06-30T18:15:23 Last Updated: 2024-08-05T12:12:29.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in the couleurId[0] parameter to the latter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/147467/Peel-Shopping-Cart-9.0.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE ID: CVE-2018-20849 State: PUBLISHED Published: 2019-06-30T18:15:43 Last Updated: 2024-08-05T12:12:29.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/147470/Arastta-1.6.2-Cross-Site-Scripting.html
CVE ID: CVE-2018-20850 State: PUBLISHED Published: 2019-07-04T13:16:32 Last Updated: 2024-08-05T12:12:29.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu/2018-006/
CVE ID: CVE-2018-20851 State: PUBLISHED Published: 2019-07-10T13:38:04 Last Updated: 2024-08-05T12:12:29.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helpy before 2.2.0 allows agents to edit admins. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/helpyio/helpy/commit/a26dd854deb17e36a605f91a6f51d128e98d3818 - https://github.com/helpyio/helpy/compare/d64e97a...592bc60
CVE ID: CVE-2018-20852 State: PUBLISHED Published: 2019-07-13T20:29:42 Last Updated: 2024-08-05T12:12:29.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the
efaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue35121 - https://python-security.readthedocs.io/vuln/cookie-domain-check.html - https://lists.debian.org/debian-lts-announce/2019/08/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00071.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00074.html - https://lists.debian.org/debian-lts-announce/2019/08/msg00
ensuse.org/opensuse-security-announce/2019-08/msg00074.html - https://lists.debian.org/debian-lts-announce/2019/08/msg00040.html - https://usn.ubuntu.com/4127-2/ - https://usn.ubuntu.com/4127-1/ - https://access.redhat.com/errata/RHSA-2019:3725 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/ - https://access.redhat.com/errata/RHSA-2019:3948 - http
sts.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/ - https://access.redhat.com/errata/RHSA-2019:3948 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html - https://security.gentoo.org/glsa/202003-26 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html
CVE ID: CVE-2018-20853 State: PUBLISHED Published: 2019-11-06T19:17:12 Last Updated: 2024-08-05T12:12:28.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin before 2.8.2 for WordPress. The plugin is vulnerable to SPAM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wysija-newsletters/#developers
CVE ID: CVE-2018-20854 State: PUBLISHED Published: 2019-07-26T04:39:29 Last Updated: 2024-08-05T12:12:29.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 4.20. drivers/phy/mscc/phy-ocelot-serdes.c has an off-by-one error with a resultant ctrl->phys out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/6acb47d1a318e5b3b7115354ebc4ea060c59d3a1 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6acb47d1a318e5b3b7115354ebc4ea060c59d3a1 - https://security.netapp.com/advisory/ntap-20190905-0002/ - https://support.f5.com/csp/article/K324
354ebc4ea060c59d3a1 - https://security.netapp.com/advisory/ntap-20190905-0002/ - https://support.f5.com/csp/article/K32450233 - https://support.f5.com/csp/article/K32450233?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2018-20855 State: PUBLISHED Published: 2019-07-26T04:39:40 Last Updated: 2024-08-05T12:12:29.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/0625b4ba1a5d4703c7fb01c497bd6c156908af00 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0625b4ba1a5d4703c7fb01c497bd6c156908af00 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLo
ds/linux.git/commit/?id=0625b4ba1a5d4703c7fb01c497bd6c156908af00 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.7 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html - https://security.netapp.com/advisory/ntap-20190905-0002/
CVE ID: CVE-2018-20856 State: PUBLISHED Published: 2019-07-26T04:40:41 Last Updated: 2024-08-05T12:12:29.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-after-free because a certain error case is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.7 - https://github.com/torvalds/linux/commit/54648cf1ec2d7f4b6a71767799c45676a138ca24 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54648cf1ec2d7f4b6a71767799c45676a138ca24 - https://usn.ubuntu.com/4094-1
/linux/kernel/git/torvalds/linux.git/commit/?id=54648cf1ec2d7f4b6a71767799c45676a138ca24 - https://usn.ubuntu.com/4094-1/ - https://seclists.org/bugtraq/2019/Aug/18 - https://www.debian.org/security/2019/dsa-4497 - https://seclists.org/bugtraq/2019/Aug/26 - https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html - http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://usn.ubuntu.com/4116-1/ - https://usn.ubuntu.com/4118-1/ - https://security.netapp.com/advisory/ntap-20190905-0002/ - http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html - https://support.f5.com/csp/article/K1467324
ecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html - https://support.f5.com/csp/article/K14673240?utm_source=f5support&amp%3Butm_medium=RSS - https://access.redhat.com/errata/RHSA-2019:3076 - https://access.redhat.com/errata/RHSA-2019:3055 - https://access.redhat.com/errata/RHSA-2019:3089 - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html - https://access.redhat.com/errata/RHSA-2019:3217 - https://access.redhat.com/errata/RHSA-2020:0100 - https://access.redhat.com/errata/RHSA-2020:0103 - https://access.redhat.com/errata/RHSA-2020:0543 - https://access.redhat.com/errata/RHSA-2020:0664 - https://access.redhat.com/errata/RHSA-
hat.com/errata/RHSA-2020:0543 - https://access.redhat.com/errata/RHSA-2020:0664 - https://access.redhat.com/errata/RHSA-2020:0698
CVE ID: CVE-2018-20857 State: PUBLISHED Published: 2019-07-26T11:41:03 Last Updated: 2024-08-05T12:12:29.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!---->. and then the attacker's domain name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zendesk/samlr/compare/v2.6.1...v2.6.2
CVE ID: CVE-2018-20858 State: PUBLISHED Published: 2019-08-09T15:34:25 Last Updated: 2024-08-05T12:12:29.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Recommender before 2018-07-18 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/edx/RecommenderXBlock/pull/2 - https://groups.google.com/forum/#%21topic/openedx-announce/SF8Sn6MuUTg
CVE ID: CVE-2018-20859 State: PUBLISHED Published: 2019-07-30T18:46:20 Last Updated: 2024-08-05T12:12:28.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/openedx-announce/wsm5mtUhhME - https://github.com/edx/edx-platform/commit/5b144559fbdba7ff673cc1c165aa2d343e07b6bd.patch - https://patch-diff.githubusercontent.com/raw/edx/edx-platform/pull/18639.patch
CVE ID: CVE-2018-20860 State: PUBLISHED Published: 2019-07-30T18:33:03 Last Updated: 2024-08-05T12:12:29.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: libopenmpt before 0.3.13 allows a crash with malformed MED files. Additional Analyst Notes: - CVE Program Container: References: - https://lib.openmpt.org/libopenmpt/2018/10/21/security-updates-0.3.13-0.2.10933-beta36-0.2.7561-beta20.5-p11-0.2.7386-beta20.3-p14/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html
CVE ID: CVE-2018-20861 State: PUBLISHED Published: 2019-07-30T18:32:13 Last Updated: 2024-08-05T12:12:28.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files. Additional Analyst Notes: - CVE Program Container: References: - https://lib.openmpt.org/libopenmpt/2018/07/28/security-updates-0.3.11-0.2.10635-beta34-0.2.7561-beta20.5-p10-0.2.7386-beta20.3-p13/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html
CVE ID: CVE-2018-20862 State: PUBLISHED Published: 2019-07-30T14:26:37 Last Updated: 2024-08-05T12:12:29.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 76.0.8 unsafely performs PostgreSQL password changes (SEC-366). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/76+Change+Log
CVE ID: CVE-2018-20863 State: PUBLISHED Published: 2019-07-30T14:20:54 Last Updated: 2024-08-05T12:12:29.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments (SEC-452). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/76+Change+Log
CVE ID: CVE-2018-20864 State: PUBLISHED Published: 2019-07-30T14:21:34 Last Updated: 2024-08-05T12:12:29.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 76.0.8 allows a persistent Virtual FTP accounts after removal of its associated domain (SEC-454). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/76+Change+Log
CVE ID: CVE-2018-20865 State: PUBLISHED Published: 2019-07-30T14:22:10 Last Updated: 2024-08-05T12:12:28.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field (SEC-459). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/76+Change+Log
CVE ID: CVE-2018-20866 State: PUBLISHED Published: 2019-07-30T14:22:56 Last Updated: 2024-08-05T12:12:29.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/76+Change+Log
CVE ID: CVE-2018-20867 State: PUBLISHED Published: 2019-07-30T13:59:02 Last Updated: 2024-08-05T12:12:29.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 76.0.8 has an open redirect when resetting connections (SEC-462). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/76+Change+Log
CVE ID: CVE-2018-20868 State: PUBLISHED Published: 2019-07-30T14:25:19 Last Updated: 2024-08-05T12:12:29.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/76+Change+Log
CVE ID: CVE-2018-20869 State: PUBLISHED Published: 2019-07-30T14:27:55 Last Updated: 2024-08-05T12:12:29.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin (SEC-465). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/76+Change+Log
CVE ID: CVE-2018-20870 State: PUBLISHED Published: 2019-07-30T14:29:13 Last Updated: 2024-08-05T12:12:29.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/76+Change+Log
CVE ID: CVE-2018-20871 State: PUBLISHED Published: 2019-07-30T18:30:53 Last Updated: 2024-08-05T12:12:29.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions ("other" write access) occur in certain cases (GE-6890). Additional Analyst Notes: - CVE Program Container: References: - http://www.univa.com/resources/files/Release_Notes_Univa_Grid_Engine_8.6.6.pdf
CVE ID: CVE-2018-20872 State: PUBLISHED Published: 2019-07-31T17:11:25 Last Updated: 2024-08-05T12:12:29.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649. Additional Analyst Notes: - CVE Program Container: References: - https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers
CVE ID: CVE-2018-20873 State: PUBLISHED Published: 2019-08-01T12:38:01 Last Updated: 2024-08-05T12:12:29.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/74+Change+Log
CVE ID: CVE-2018-20874 State: PUBLISHED Published: 2019-08-01T12:40:12 Last Updated: 2024-08-05T12:12:29.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface (SEC-428). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/74+Change+Log
CVE ID: CVE-2018-20875 State: PUBLISHED Published: 2019-08-01T12:41:25 Last Updated: 2024-08-05T12:12:29.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface (SEC-433). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/74+Change+Log
CVE ID: CVE-2018-20876 State: PUBLISHED Published: 2019-08-01T12:43:05 Last Updated: 2024-08-05T12:12:29.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/74+Change+Log
CVE ID: CVE-2018-20877 State: PUBLISHED Published: 2019-08-01T12:44:04 Last Updated: 2024-08-05T12:12:29.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/74+Change+Log
CVE ID: CVE-2018-20878 State: PUBLISHED Published: 2019-08-01T12:44:58 Last Updated: 2024-08-05T12:12:29.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface (SEC-441). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/74+Change+Log
CVE ID: CVE-2018-20879 State: PUBLISHED Published: 2019-08-01T12:52:05 Last Updated: 2024-08-05T12:12:29.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API (SEC-444). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/74+Change+Log
CVE ID: CVE-2018-20880 State: PUBLISHED Published: 2019-08-01T12:53:17 Last Updated: 2024-08-05T12:12:29.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file (SEC-445). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/74+Change+Log
CVE ID: CVE-2018-20881 State: PUBLISHED Published: 2019-08-01T12:54:23 Last Updated: 2024-08-05T12:12:29.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/74+Change+Log
CVE ID: CVE-2018-20882 State: PUBLISHED Published: 2019-08-01T12:55:42 Last Updated: 2024-08-05T12:12:29.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/74+Change+Log
CVE ID: CVE-2018-20883 State: PUBLISHED Published: 2019-08-01T12:56:49 Last Updated: 2024-08-05T12:12:29.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 74.0.8 allows FTP access during account suspension (SEC-449). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/74+Change+Log