Skip to content
OpenAdvisories

Archive

1 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /1 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

162 results · Feed

  • Unscored —
    CVE-2018-20941

    cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin (SEC-349).

  • Unscored —
    CVE-2016-10833

    cPanel before 55.9999.141 mishandles username-based blocking for PRE requests in cPHulkd (SEC-104).

  • Unscored —
    CVE-2018-20940

    cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon the enabling of ba…

  • Unscored —
    CVE-2018-20939

    cPanel before 68.0.27 allows a user to discover contents of directories (that are not owned by that user) by leveraging…

  • Unscored —
    CVE-2018-20938

    cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324).

  • Unscored —
    CVE-2016-10834

    cPanel before 55.9999.141 allows account-suspension bypass via ftp (SEC-105).

  • Unscored —
    CVE-2018-20937

    cPanel before 68.0.27 does not validate database and dbuser names during renames (SEC-321).

  • Unscored —
    CVE-2016-10835

    cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging (SEC-107).

  • Unscored —
    CVE-2018-20936

    cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf (SEC-308).

  • Unscored —
    CVE-2019-14494

    An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::til…

    poppler poppler cppcheck Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2019-14493

    NULL Pointer Dereference in OpenCV.

    An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

    opencv opencv-python opencv-contrib-python opencv Debian Ubuntu PyPI
  • High 7.5
    CVE-2019-14492

    Out-of-bounds Read and Out-of-bounds Write in OpenCV

    An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

    opencv-contrib-python opencv opencv-python opencv Debian Ubuntu PyPI
  • High 8.2
    CVE-2019-14491

    Out-of-bounds Read in OpenCV

    An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

    opencv-python opencv-contrib-python opencv opencv Debian Ubuntu PyPI
  • Unscored —
    CVE-2016-10836

    cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav (SEC-108).

  • Unscored —
    CVE-2018-20935

    cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412).

  • Unscored —
    CVE-2018-20934

    cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).

  • Unscored —
    CVE-2018-20933

    cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410).

  • Unscored —
    CVE-2018-20932

    cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406).

  • Unscored —
    CVE-2018-20931

    cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405).

  • Unscored —
    CVE-2018-20930

    cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401).

  • Unscored —
    CVE-2016-10837

    cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46).

  • Unscored —
    CVE-2016-10838

    cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script (SEC-70).

  • Unscored —
    CVE-2018-20928

    cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).

  • Unscored —
    CVE-2016-10839

    cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71).

  • Unscored —
    CVE-2016-10840

    cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).

  • Unscored —
    CVE-2016-10841

    The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).

  • Unscored —
    CVE-2016-10842

    cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74).

  • Unscored —
    CVE-2016-10843

    cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76).

  • Unscored —
    CVE-2016-10844

    The chcpass script in cPanel before 11.54.0.4 reveals a password hash (SEC-77).

  • Unscored —
    CVE-2016-10845

    cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78).

  • Unscored —
    CVE-2016-10846

    cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SE…

  • Unscored —
    CVE-2016-10847

    cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80).

  • Unscored —
    CVE-2016-10848

    cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81).

  • Unscored —
    CVE-2016-10849

    cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82).

  • Unscored —
    CVE-2019-14486

    GnuCOBOL 2.2 has a buffer overflow in cb_evaluate_expr in cobc/field.c via crafted COBOL source code.

    gnucobol gnucobol Debian Ubuntu
  • Unscored —
    CVE-2018-20929

    cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392).

  • Unscored —
    CVE-2018-20927

    cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).

  • Unscored —
    CVE-2018-20926

    cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380).

  • Unscored —
    CVE-2018-20925

    cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379).

  • Unscored —
    CVE-2018-20924

    cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).