Skip to content
OpenAdvisories

Archive

6 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /6 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

64 results · Feed

  • Unscored —
    CVE-2016-10796

    cPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130).

  • Unscored —
    CVE-2016-10795

    cPanel before 59.9999.145 allows stored XSS in the WHM tail_upcp2.cgi interface (SEC-156).

  • Unscored —
    CVE-2016-10794

    cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154).

  • Unscored —
    CVE-2016-10793

    cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF scripts (SEC-152).

  • Unscored —
    CVE-2016-10792

    cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives (SEC-141).

  • Unscored —
    CVE-2016-10791

    cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are impossible (CPANEL…

  • Unscored —
    CVE-2016-10790

    cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192).

  • Unscored —
    CVE-2016-10789

    cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler (SEC-191).

  • Unscored —
    CVE-2016-10788

    cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin (SEC-188).

  • Unscored —
    CVE-2016-10787

    The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries (SEC-187).

  • Unscored —
    CVE-2016-10786

    cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC-186).

  • Unscored —
    CVE-2016-10785

    cPanel before 60.0.25 allows attackers to discover file contents during file copy operations (SEC-185).

  • Unscored —
    CVE-2016-10784

    cPanel before 60.0.25 allows self XSS in the alias upload interface (SEC-184).

  • Unscored —
    CVE-2016-10783

    cPanel before 60.0.25 allows self stored XSS in SSL_listkeys (SEC-182).

  • Unscored —
    CVE-2016-10782

    cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs (SEC-181).

  • Unscored —
    CVE-2016-10781

    cPanel before 60.0.25 allows self XSS in the UI_confirm API (SEC-180).

  • Unscored —
    CVE-2016-10780

    cPanel before 60.0.25 allows stored XSS in the ftp_sessions API (SEC-180).

  • Unscored —
    CVE-2016-10779

    cPanel before 60.0.25 allows stored XSS in api1_listautoresponders (SEC-179).

  • Unscored —
    CVE-2016-10777

    cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover_host (SEC-177).

  • Unscored —
    CVE-2016-10778

    cPanel before 60.0.25 allows self stored XSS in the listftpstable API (SEC-178).

  • Unscored —
    CVE-2016-10776

    cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination (SEC-174).

  • Unscored —
    CVE-2019-14692

    AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.

    adplug adplug Debian Ubuntu
  • Unscored —
    CVE-2019-14691

    AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.

    adplug adplug Debian Ubuntu
  • Unscored —
    CVE-2019-14690

    AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.

    adplug adplug Debian Ubuntu