Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
22 - https://github.com/seccomp/libseccomp-golang/commit/06e7a29f36a34b8cf419aeb87b979ee508e58f9e - http://www.openwall.com/lists/oss-security/2019/04/25/6 - https://access.redhat.com/errata/RHSA-2019:4087 - https://access.redhat.com/errata/RHSA-2019:4090 - https://lists.debian.org/debian-lts-announce/2020/08/msg00016.html - https://usn.ubuntu.com/4574-1/
CVE ID: CVE-2017-18368 State: PUBLISHED Published: 2019-05-02T16:14:16.000Z Last Updated: 2025-10-21T23:45:37.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited through the remote_host parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2017/Jan/40 - https://ssd-disclosure.com/index.php/archives/2910 -
t: References: - https://seclists.org/fulldisclosure/2017/Jan/40 - https://ssd-disclosure.com/index.php/archives/2910 - https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/ - https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt - http://www.zyxel.com/support/announcement_unauthenticated.shtml
CVE ID: CVE-2017-18369 State: PUBLISHED Published: 2019-05-02T16:14:35 Last Updated: 2024-08-05T21:20:50.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the adv_remotelog.asp page and can be exploited through the syslogServerAddr parameter. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2017/Jan/40 - https://ssd-disclosure.com/index.php/archives/2910 - https://raw.githubusercontent.com/pedrib/PoC/master
e/2017/Jan/40 - https://ssd-disclosure.com/index.php/archives/2910 - https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt
CVE ID: CVE-2017-18370 State: PUBLISHED Published: 2019-05-02T16:14:52 Last Updated: 2024-08-05T21:20:50.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. The vulnerability is in the logSet.asp page and can be exploited through the ServerIP parameter. Authentication can be achieved by exploiting CVE-2017-18371. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2017/Jan/40 - https://ssd-disclosure.com/index.php/archives
Container: References: - https://seclists.org/fulldisclosure/2017/Jan/40 - https://ssd-disclosure.com/index.php/archives/2910 - https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/ - https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt - http://www.zyxel.com/support/announcement_unauthenticated.shtml
CVE ID: CVE-2017-18371 State: PUBLISHED Published: 2019-05-02T16:15:05 Last Updated: 2024-08-05T21:20:50.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2
licious purposes. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2017/Jan/40 - https://ssd-disclosure.com/index.php/archives/2910 - https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/ - https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt - http://www.zyxel.com/support/announcement_unauthenticated.shtml
CVE ID: CVE-2017-18372 State: PUBLISHED Published: 2019-05-02T16:15:22 Last Updated: 2024-08-05T21:20:50.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the tools_time.asp page and can be exploited through the uiViewSNTPServer parameter. Authentication can be achieved by exploiting CVE-2017-18373. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2017/Jan/40 - https://ssd-disclosure.com/index.php/archi
am Container: References: - https://seclists.org/fulldisclosure/2017/Jan/40 - https://ssd-disclosure.com/index.php/archives/2910 - https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt
CVE ID: CVE-2017-18373 State: PUBLISHED Published: 2019-05-02T16:15:34 Last Updated: 2024-08-05T21:20:50.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username user3 and and a long password consisting of a repetition of the string 0123456789. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes. Additional Analyst Notes: - CVE Program Contai
ed command injections, and change router settings for malicious purposes. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2017/Jan/40 - https://ssd-disclosure.com/index.php/archives/2910 - https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt
CVE ID: CVE-2017-18374 State: PUBLISHED Published: 2019-05-02T16:15:47 Last Updated: 2024-08-05T21:20:50.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and password true. These accounts can be used to login to the web interface, exploit authenticated command injections and change router settings for malicious purposes. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2017/Jan/40 - https://ssd-disclosure.com/index.php/arc
gram Container: References: - https://seclists.org/fulldisclosure/2017/Jan/40 - https://ssd-disclosure.com/index.php/archives/2910 - https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/ - https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt - http://www.zyxel.com/support/announcement_unauthenticated.shtml
CVE ID: CVE-2017-18375 State: PUBLISHED Published: 2019-05-24T17:42:10 Last Updated: 2024-08-05T21:20:50.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://fenceposterror.github.io/2017/06/16/Hacking-For-Fun-And-Non-Profit.html
CVE ID: CVE-2017-18376 State: PUBLISHED Published: 2019-06-02T19:12:55 Last Updated: 2024-08-05T21:20:51.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: An improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1 allows users with read-only or read/write access to escalate their privileges to the administrator's privileges. This affects app/controllers/UserCtrl.scala. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TheHive-Project/TheHive/issues/408 - https://github.com/TheHive-Project/TheHive/releases/tag/3.3.1 - https://gist.github.com/RaJiska/c1b4521aefd77ed43b06045ca05e2591
CVE ID: CVE-2017-18377 State: PUBLISHED Published: 2019-06-11T20:44:37 Last Updated: 2024-08-05T21:20:50.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Wireless IP Camera (P2P) WIFICAM cameras. There is Command Injection in the set_ftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a set_ftp.cgi?svr=192.168.1.1&port=21&user=ftp URI. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-root-rce
CVE ID: CVE-2017-18378 State: PUBLISHED Published: 2019-06-11T20:44:55 Last Updated: 2024-08-05T21:20:50.846Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through $tmp_upload_dir, leading to upgrade_handle.php?cmd=writeuploaddir remote command execution. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000049072/Security-Advisory-for-Command-Injection-in-ReadyNAS-Surveillance-Application-PSV-2017-2653 - https://www.exploit-db.com/explo
ity-Advisory-for-Command-Injection-in-ReadyNAS-Surveillance-Application-PSV-2017-2653 - https://www.exploit-db.com/exploits/42956
CVE ID: CVE-2017-18379 State: PUBLISHED Published: 2019-07-27T21:38:52 Last Updated: 2024-08-05T21:20:50.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/0c319d3a144d4b8f1ea2047fd614d2149b68f889 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c319d3a144d4b8f1ea2047fd614d2149b68f889 - https://support.f5.com/csp/article/K74012105 - https://support.f5.com/csp/article/K74012105?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2017-18380 State: PUBLISHED Published: 2019-07-30T12:30:50 Last Updated: 2024-08-05T21:20:51.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain name. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/openedx-announce/QTvijt48bAY - https://github.com/edx/edx-platform/pull/15773
CVE ID: CVE-2017-18381 State: PUBLISHED Published: 2019-07-30T18:38:51 Last Updated: 2024-08-05T21:20:50.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/openedx-announce/mpyyx34LWSY - https://groups.google.com/forum/#%21topic/openedx-announce/jRXyo1HJzNk
CVE ID: CVE-2017-18382 State: PUBLISHED Published: 2019-08-02T12:19:16 Last Updated: 2024-08-05T21:20:50.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18383 State: PUBLISHED Published: 2019-08-02T12:20:15 Last Updated: 2024-08-05T21:20:50.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18384 State: PUBLISHED Published: 2019-08-02T12:21:31 Last Updated: 2024-08-05T21:20:50.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18385 State: PUBLISHED Published: 2019-08-02T12:22:29 Last Updated: 2024-08-05T21:20:50.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18386 State: PUBLISHED Published: 2019-08-02T12:29:42 Last Updated: 2024-08-05T21:20:51.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18387 State: PUBLISHED Published: 2019-08-02T12:30:29 Last Updated: 2024-08-05T21:20:51.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18388 State: PUBLISHED Published: 2019-08-02T12:31:29 Last Updated: 2024-08-05T21:20:50.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18389 State: PUBLISHED Published: 2019-08-02T12:32:21 Last Updated: 2024-08-05T21:20:50.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18390 State: PUBLISHED Published: 2019-08-02T12:33:10 Last Updated: 2024-08-05T21:20:50.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups (SEC-322). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18391 State: PUBLISHED Published: 2019-08-02T12:33:59 Last Updated: 2024-08-05T21:20:51.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval (SEC-323). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18392 State: PUBLISHED Published: 2019-08-02T13:03:23 Last Updated: 2024-08-05T21:20:51.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts (SEC-325). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18393 State: PUBLISHED Published: 2019-08-02T13:04:12 Last Updated: 2024-08-05T21:20:50.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail (SEC-326). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18394 State: PUBLISHED Published: 2019-08-02T13:04:57 Last Updated: 2024-08-05T21:20:50.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18395 State: PUBLISHED Published: 2019-08-02T13:05:48 Last Updated: 2024-08-05T21:20:50.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 does not block a username of ssl (SEC-328). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18396 State: PUBLISHED Published: 2019-08-02T13:06:34 Last Updated: 2024-08-05T21:20:51.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18397 State: PUBLISHED Published: 2019-08-02T13:07:22 Last Updated: 2024-08-05T21:20:50.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18398 State: PUBLISHED Published: 2019-08-02T13:08:11 Last Updated: 2024-08-05T21:20:50.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18399 State: PUBLISHED Published: 2019-08-02T13:08:56 Last Updated: 2024-08-05T21:20:50.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer (SEC-332). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18400 State: PUBLISHED Published: 2019-08-02T13:09:42 Last Updated: 2024-08-05T21:20:51.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18401 State: PUBLISHED Published: 2019-08-02T13:10:36 Last Updated: 2024-08-05T21:20:50.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats (SEC-334). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18402 State: PUBLISHED Published: 2019-08-02T13:11:24 Last Updated: 2024-08-05T21:20:50.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade (SEC-336). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18403 State: PUBLISHED Published: 2019-08-02T13:12:10 Last Updated: 2024-08-05T21:20:50.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives (SEC-337). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18404 State: PUBLISHED Published: 2019-08-02T13:12:55 Last Updated: 2024-08-05T21:20:51.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows domain data to be deleted for domains with the .lock TLD (SEC-341). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18405 State: PUBLISHED Published: 2019-08-02T13:13:42 Last Updated: 2024-08-05T21:20:51.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18406 State: PUBLISHED Published: 2019-08-02T13:45:54 Last Updated: 2024-08-05T21:20:51.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 67.9999.103 allows SQL injection during eximstats processing (SEC-276). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18407 State: PUBLISHED Published: 2019-08-02T13:46:48 Last Updated: 2024-08-05T21:20:51.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download (SEC-279). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18408 State: PUBLISHED Published: 2019-08-02T13:47:37 Last Updated: 2024-08-05T21:20:50.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18409 State: PUBLISHED Published: 2019-08-02T13:48:25 Last Updated: 2024-08-05T21:20:51.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases (SEC-283). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18410 State: PUBLISHED Published: 2019-08-02T13:49:13 Last Updated: 2024-08-05T21:20:50.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server (SEC-284). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18411 State: PUBLISHED Published: 2019-08-02T13:50:09 Last Updated: 2024-08-05T21:20:51.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account (SEC-285). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18412 State: PUBLISHED Published: 2019-08-02T13:50:57 Last Updated: 2024-08-05T21:20:51.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename (SEC-296). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log