Skip to content
OpenAdvisories

Archive

5 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /5 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

60 results · Feed

  • Unscored —
    CVE-2017-18477

    In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206).

  • Unscored —
    CVE-2017-18476

    Leech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205).

  • Unscored —
    CVE-2017-18475

    In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system…

  • Unscored —
    CVE-2017-18474

    cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases (SEC-201).

  • Unscored —
    CVE-2017-18473

    cPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199).

  • Unscored —
    CVE-2017-18472

    cPanel before 62.0.4 allows reflected XSS in reset-password interfaces (SEC-198).

  • Unscored —
    CVE-2017-18471

    cPanel before 62.0.4 allows self XSS on the paper_lantern password-change screen (SEC-197).

  • Unscored —
    CVE-2017-18470

    cPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).

  • Unscored —
    CVE-2017-18469

    cPanel before 62.0.17 allows demo accounts to execute code via an NVData_fetchinc API call (SEC-233).

  • Unscored —
    CVE-2017-18468

    cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API (SEC-232).

  • Unscored —
    CVE-2017-18467

    cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229).

  • Unscored —
    CVE-2017-18465

    cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227).

  • Unscored —
    CVE-2017-18466

    cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configur…

  • Unscored —
    CVE-2017-18464

    cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226).

  • Unscored —
    CVE-2017-18462

    cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-224).

  • Unscored —
    CVE-2019-14521

    The api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers to send any kind of f…

  • Unscored —
    CVE-2019-14525

    In Octopus Deploy 2019.4.0 through 2019.6.x before 2019.6.6, and 2019.7.x before 2019.7.6, an authenticated system admi…

  • Unscored —
    CVE-2019-14663

    Brandy 1.20.1 has a stack-based buffer overflow in fileio_openin in fileio.c via crafted BASIC source code.

    brandy brandy Debian Ubuntu
  • Unscored —
    CVE-2019-14662

    Brandy 1.20.1 has a stack-based buffer overflow in fileio_openout in fileio.c via crafted BASIC source code.

    brandy brandy Debian Ubuntu
  • Unscored —
    CVE-2019-14654

    In Joomla! 3.9.7 and 3.9.8, inadequate filtering allows users authorised to create custom fields to manipulate the filt…