Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-18413 State: PUBLISHED Published: 2019-08-02T13:51:49 Last Updated: 2024-08-05T21:20:51.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears (SEC-299). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18414 State: PUBLISHED Published: 2019-08-02T13:52:33 Last Updated: 2024-08-05T21:20:51.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html (SEC-300). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18415 State: PUBLISHED Published: 2019-08-02T13:53:15 Last Updated: 2024-08-05T21:20:51.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18416 State: PUBLISHED Published: 2019-08-02T13:53:59 Last Updated: 2024-08-05T21:20:51.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update (SEC-303). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2017-18417 State: PUBLISHED Published: 2019-08-02T15:33:52 Last Updated: 2024-08-05T21:20:51.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18418 State: PUBLISHED Published: 2019-08-02T15:34:44 Last Updated: 2024-08-05T21:20:51.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18419 State: PUBLISHED Published: 2019-08-02T15:35:25 Last Updated: 2024-08-05T21:20:51.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18420 State: PUBLISHED Published: 2019-08-02T15:36:08 Last Updated: 2024-08-05T21:20:51.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18421 State: PUBLISHED Published: 2019-08-02T15:36:53 Last Updated: 2024-08-05T21:20:51.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 66.0.2 allows demo accounts to create databases and users (SEC-271). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18422 State: PUBLISHED Published: 2019-08-02T15:37:45 Last Updated: 2024-08-05T21:20:50.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions (SEC-272). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18423 State: PUBLISHED Published: 2019-08-02T15:38:29 Last Updated: 2024-08-05T21:20:51.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 66.0.2, domain log files become readable after log processing (SEC-273). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18424 State: PUBLISHED Published: 2019-08-02T15:42:47 Last Updated: 2024-08-05T21:20:51.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt (SEC-274). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18425 State: PUBLISHED Published: 2019-08-02T15:43:39 Last Updated: 2024-08-05T21:20:50.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18426 State: PUBLISHED Published: 2019-08-02T15:44:36 Last Updated: 2024-08-05T21:20:51.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18427 State: PUBLISHED Published: 2019-08-02T15:46:20 Last Updated: 2024-08-05T21:20:51.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 66.0.2, weak log-file permissions can occur after account modification (SEC-289). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18428 State: PUBLISHED Published: 2019-08-02T15:47:25 Last Updated: 2024-08-05T21:20:51.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18429 State: PUBLISHED Published: 2019-08-02T15:54:08 Last Updated: 2024-08-05T21:20:51.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination (SEC-291). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18430 State: PUBLISHED Published: 2019-08-02T15:55:00 Last Updated: 2024-08-05T21:20:51.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 66.0.2, user and group ownership may be incorrectly set when using reassign_post_terminate_cruft (SEC-294). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18431 State: PUBLISHED Published: 2019-08-02T15:56:07 Last Updated: 2024-08-05T21:20:51.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts (CPANEL-13941). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/66+Change+Log
CVE ID: CVE-2017-18432 State: PUBLISHED Published: 2019-08-02T15:57:43 Last Updated: 2024-08-05T21:20:51.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18433 State: PUBLISHED Published: 2019-08-02T15:58:29 Last Updated: 2024-08-05T21:20:51.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows code execution by webmail and demo accounts via a store_filter API call (SEC-236). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18434 State: PUBLISHED Published: 2019-08-02T15:59:21 Last Updated: 2024-08-05T21:20:51.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows code execution in the context of the root account via a SET_VHOST_LANG_PACKAGE multilang adminbin call (SEC-237). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18435 State: PUBLISHED Published: 2019-08-02T16:00:05 Last Updated: 2024-08-05T21:20:51.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API (SEC-238). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18436 State: PUBLISHED Published: 2019-08-02T16:13:12 Last Updated: 2024-08-05T21:20:51.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call (SEC-239). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18437 State: PUBLISHED Published: 2019-08-02T16:13:57 Last Updated: 2024-08-05T21:20:51.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18438 State: PUBLISHED Published: 2019-08-02T16:14:48 Last Updated: 2024-08-05T21:20:51.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls (SEC-242). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18439 State: PUBLISHED Published: 2019-08-02T16:15:43 Last Updated: 2024-08-05T21:20:51.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows demo accounts to execute code via an ImageManager_dimensions API call (SEC-243). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18440 State: PUBLISHED Published: 2019-08-02T16:16:29 Last Updated: 2024-08-05T21:20:51.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows demo users to execute traceroute via api2 (SEC-244). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18441 State: PUBLISHED Published: 2019-08-02T16:17:15 Last Updated: 2024-08-05T21:20:51.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18442 State: PUBLISHED Published: 2019-08-02T16:18:01 Last Updated: 2024-08-05T21:20:51.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18443 State: PUBLISHED Published: 2019-08-02T16:18:42 Last Updated: 2024-08-05T21:20:51.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18444 State: PUBLISHED Published: 2019-08-02T16:19:27 Last Updated: 2024-08-05T21:20:51.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18445 State: PUBLISHED Published: 2019-08-02T16:20:09 Last Updated: 2024-08-05T21:20:51.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18446 State: PUBLISHED Published: 2019-08-02T16:20:55 Last Updated: 2024-08-05T21:20:51.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18447 State: PUBLISHED Published: 2019-08-02T16:22:14 Last Updated: 2024-08-05T21:20:51.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows demo accounts to execute code via the ClamScanner_getsocket API (SEC-251). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18448 State: PUBLISHED Published: 2019-08-02T16:22:57 Last Updated: 2024-08-05T21:20:51.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows certain file-read operations via a Serverinfo_manpage API call (SEC-252). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18449 State: PUBLISHED Published: 2019-08-02T16:23:51 Last Updated: 2024-08-05T21:20:51.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18450 State: PUBLISHED Published: 2019-08-02T16:24:35 Last Updated: 2024-08-05T21:20:51.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convert_roundcube_mysql2sqlite (SEC-255). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18451 State: PUBLISHED Published: 2019-08-02T16:25:22 Last Updated: 2024-08-05T21:20:51.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval upon a cPAddon upgrade (SEC-257). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18452 State: PUBLISHED Published: 2019-08-02T16:26:04 Last Updated: 2024-08-05T21:20:51.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 allows code execution via Rails configuration files (SEC-259). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18453 State: PUBLISHED Published: 2019-08-02T16:26:50 Last Updated: 2024-08-05T21:20:51.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 64.0.21 does not preserve supplemental groups across account renames (SEC-260). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/64+Change+Log
CVE ID: CVE-2017-18454 State: PUBLISHED Published: 2019-08-02T16:28:02 Last Updated: 2024-08-05T21:20:51.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18455 State: PUBLISHED Published: 2019-08-02T16:28:51 Last Updated: 2024-08-05T21:20:51.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18456 State: PUBLISHED Published: 2019-08-02T16:29:33 Last Updated: 2024-08-05T21:20:51.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18457 State: PUBLISHED Published: 2019-08-02T16:30:22 Last Updated: 2024-08-05T21:20:51.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18458 State: PUBLISHED Published: 2019-08-02T16:31:05 Last Updated: 2024-08-05T21:20:51.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18459 State: PUBLISHED Published: 2019-08-02T16:31:44 Last Updated: 2024-08-05T21:20:51.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18460 State: PUBLISHED Published: 2019-08-02T16:32:32 Last Updated: 2024-08-05T21:20:51.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18461 State: PUBLISHED Published: 2019-08-02T16:33:17 Last Updated: 2024-08-05T21:20:51.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 allows does not preserve security policy questions across an account rename (SEC-223). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18462 State: PUBLISHED Published: 2019-08-05T11:49:11 Last Updated: 2024-08-05T21:20:51.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-224). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18463 State: PUBLISHED Published: 2019-08-02T16:33:59 Last Updated: 2024-08-05T21:20:51.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path (SEC-225). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18464 State: PUBLISHED Published: 2019-08-05T11:49:56 Last Updated: 2024-08-05T21:20:51.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18465 State: PUBLISHED Published: 2019-08-05T11:51:32 Last Updated: 2024-08-05T21:20:51.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18466 State: PUBLISHED Published: 2019-08-05T11:50:47 Last Updated: 2024-08-05T21:20:51.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration (SEC-228). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18467 State: PUBLISHED Published: 2019-08-05T11:52:18 Last Updated: 2024-08-05T21:20:51.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18468 State: PUBLISHED Published: 2019-08-05T11:53:13 Last Updated: 2024-08-05T21:20:51.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API (SEC-232). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18469 State: PUBLISHED Published: 2019-08-05T12:40:03 Last Updated: 2024-08-05T21:20:51.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.17 allows demo accounts to execute code via an NVData_fetchinc API call (SEC-233). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18470 State: PUBLISHED Published: 2019-08-05T12:41:28 Last Updated: 2024-08-05T21:20:51.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18471 State: PUBLISHED Published: 2019-08-05T12:42:13 Last Updated: 2024-08-05T21:20:51.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.4 allows self XSS on the paper_lantern password-change screen (SEC-197). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18472 State: PUBLISHED Published: 2019-08-05T12:43:00 Last Updated: 2024-08-05T21:20:51.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.4 allows reflected XSS in reset-password interfaces (SEC-198). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18473 State: PUBLISHED Published: 2019-08-05T12:43:53 Last Updated: 2024-08-05T21:20:51.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log
CVE ID: CVE-2017-18474 State: PUBLISHED Published: 2019-08-05T12:44:37 Last Updated: 2024-08-05T21:20:51.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases (SEC-201). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/62+Change+Log