10 results · Clear filters · Feed
-
High 8.7
Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact…
-
High 8.8
Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned f…
-
High 8.2
Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other ac…
-
High 8.7CVE-2026-65643 Public exploit
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.
-
High 7.1
Improper authorization checks of team members privileges allow a team member to escalate privileges to the team owner a…
-
High 8.1
Insufficient sanitization of SQL queries in the `sqloptimizer` utility script allows SQL Injections on behalf of the ro…
-
High 8.3
Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint allows unauthenticated …
-
High 8.2
SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle th…
-
High 8.6
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpda…
-
High 8.6
Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary …