rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-20852 
http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-13T20:29:42.000Z
CVE-2018-20853 
An issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin before 2.8.2 for WordPress. The plugin is vulnerable to SPAM attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T19:17:12.000Z
CVE-2018-20854 
An issue was discovered in the Linux kernel before 4.20. drivers/phy/mscc/phy-ocelot-serdes.c has an off-by-one error with a resultant ctrl->phys out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-26T04:39:29.000Z
CVE-2018-20855 
An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-26T04:39:40.000Z
CVE-2018-20856 
An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-after-free because a certain error case is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-26T04:40:41.000Z
CVE-2018-20857 
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!---->. and then the attacker's domain name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-26T11:41:03.000Z
CVE-2018-20858 
Recommender before 2018-07-18 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-09T15:34:25.000Z
CVE-2018-20859 
edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T18:46:20.000Z
CVE-2018-20860 
libopenmpt before 0.3.13 allows a crash with malformed MED files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T18:33:03.000Z
CVE-2018-20861 
libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T18:32:13.000Z
CVE-2018-20862 
cPanel before 76.0.8 unsafely performs PostgreSQL password changes (SEC-366).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T14:26:37.000Z
CVE-2018-20863 
cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments (SEC-452).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T14:20:54.000Z
CVE-2018-20864 
cPanel before 76.0.8 allows a persistent Virtual FTP accounts after removal of its associated domain (SEC-454).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T14:21:34.000Z
CVE-2018-20865 
cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field (SEC-459).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T14:22:10.000Z
CVE-2018-20866 
cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T14:22:56.000Z
CVE-2018-20867 
cPanel before 76.0.8 has an open redirect when resetting connections (SEC-462).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T13:59:02.000Z
CVE-2018-20868 
cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T14:25:19.000Z
CVE-2018-20869 
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin (SEC-465).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T14:27:55.000Z
CVE-2018-20870 
The WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T14:29:13.000Z
CVE-2018-20871 
In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions ("other" write access) occur in certain cases (GE-6890).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-30T18:30:53.000Z
CVE-2018-20872 
DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-31T17:11:25.000Z
CVE-2018-20873 
cPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T12:38:01.000Z
CVE-2018-20874 
cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface (SEC-428).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T12:40:12.000Z
CVE-2018-20875 
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface (SEC-433).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T12:41:25.000Z
CVE-2018-20876 
cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T12:43:05.000Z
CVE-2018-20877 
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T12:44:04.000Z
CVE-2018-20878 
cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface (SEC-441).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T12:44:58.000Z
CVE-2018-20879 
cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API (SEC-444).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T12:52:05.000Z
CVE-2018-20880 
cPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file (SEC-445).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T12:53:17.000Z
CVE-2018-20881 
cPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T12:54:23.000Z
CVE-2018-20882 
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T12:55:42.000Z
CVE-2018-20883 
cPanel before 74.0.8 allows FTP access during account suspension (SEC-449).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T12:56:49.000Z
CVE-2018-20884 
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T12:58:10.000Z
CVE-2018-20885 
cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:00:00.000Z
CVE-2018-20886 
cPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:01:46.000Z
CVE-2018-20887 
cPanel before 74.0.0 allows SQL injection during database backups (SEC-420).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:03:26.000Z
CVE-2018-20888 
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication (SEC-424).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:04:20.000Z
CVE-2018-20889 
cPanel before 74.0.0 allows certain file-read operations via password file caching (SEC-425).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:05:30.000Z
CVE-2018-20890 
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits (SEC-426).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:06:22.000Z
CVE-2018-20891 
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration (SEC-436).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:08:48.000Z
CVE-2018-20892 
cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling (SEC-439).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:09:41.000Z
CVE-2018-20893 
cPanel before 74.0.0 allows file-rename operations during account renames (SEC-442).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:10:35.000Z
CVE-2018-20894 
cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories (SEC-443).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:11:34.000Z
CVE-2018-20895 
In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts (SEC-393).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:40:54.000Z
CVE-2018-20896 
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface (SEC-394).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:52:01.000Z
CVE-2018-20897 
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system (SEC-395).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:53:24.000Z
CVE-2018-20898 
cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:55:01.000Z
CVE-2018-20899 
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:55:56.000Z
CVE-2018-20900 
cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T13:57:19.000Z
CVE-2018-20901 
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:20:04.000Z
CVE-2018-20902 
cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation (SEC-408).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:21:05.000Z
CVE-2018-20903 
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:21:55.000Z
CVE-2018-20904 
cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction (SEC-427).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:23:03.000Z
CVE-2018-20905 
cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:25:31.000Z
CVE-2018-20906 
cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:27:06.000Z
CVE-2018-20907 
cPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:28:22.000Z
CVE-2018-20908 
cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:29:23.000Z
CVE-2018-20909 
cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:31:14.000Z
CVE-2018-20910 
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:32:30.000Z
CVE-2018-20911 
cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup (SEC-359).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:41:41.000Z
CVE-2018-20912 
cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:42:31.000Z
CVE-2018-20913 
cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:43:29.000Z
CVE-2018-20914 
In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:44:17.000Z
CVE-2018-20915 
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:45:12.000Z
CVE-2018-20916 
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:46:01.000Z
CVE-2018-20917 
cPanel before 70.0.23 allows any user to disable Solr (SEC-371).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:47:00.000Z
CVE-2018-20918 
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:48:09.000Z
CVE-2018-20919 
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:49:06.000Z
CVE-2018-20920 
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:49:58.000Z
CVE-2018-20921 
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:50:56.000Z
CVE-2018-20922 
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:51:53.000Z
CVE-2018-20923 
cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:52:49.000Z
CVE-2018-20924 
cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:17:17.000Z
CVE-2018-20925 
cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:18:02.000Z
CVE-2018-20926 
cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:18:46.000Z
CVE-2018-20927 
cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:19:35.000Z
CVE-2018-20928 
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:46:01.000Z
CVE-2018-20929 
cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:20:25.000Z
CVE-2018-20930 
cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:46:54.000Z
CVE-2018-20931 
cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:47:45.000Z
CVE-2018-20932 
cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:48:38.000Z
CVE-2018-20933 
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:49:29.000Z
CVE-2018-20934 
cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:50:37.000Z
CVE-2018-20935 
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T15:51:27.000Z
CVE-2018-20936 
cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf (SEC-308).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:05:27.000Z
CVE-2018-20937 
cPanel before 68.0.27 does not validate database and dbuser names during renames (SEC-321).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:06:22.000Z
CVE-2018-20938 
cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:07:22.000Z
CVE-2018-20939 
cPanel before 68.0.27 allows a user to discover contents of directories (that are not owned by that user) by leveraging backups (SEC-339).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:08:14.000Z
CVE-2018-20940 
cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon the enabling of backups (SEC-342).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:09:11.000Z
CVE-2018-20941 
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin (SEC-349).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:10:08.000Z
CVE-2018-20942 
cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon configuring crontab (SEC-351).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:11:00.000Z
CVE-2018-20943 
cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon a post-update task (SEC-352).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:11:56.000Z
CVE-2018-20944 
cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test (SEC-353).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:12:47.000Z
CVE-2018-20945 
bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:13:39.000Z
CVE-2018-20946 
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archive_sync_zones script (SEC-355).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:14:38.000Z
CVE-2018-20947 
cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:15:28.000Z
CVE-2018-20948 
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:16:21.000Z
CVE-2018-20949 
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:17:13.000Z
CVE-2018-20950 
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:17:58.000Z
CVE-2018-20951 
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:18:42.000Z
CVE-2018-20952 
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC-388).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:19:30.000Z
CVE-2018-20953 
cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T16:20:17.000Z
CVE-2018-20954 
The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-08T20:13:13.000Z