Vulnerabilities > Cpanel > Cpanel > 11.50.1.2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-07-30 | CVE-2019-14394 | Information Exposure vulnerability in Cpanel cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetch_ssl_certificates_for_fqdns API (SEC-489). | 2.1 |
| 2019-07-30 | CVE-2019-14393 | Unspecified vulnerability in Cpanel cPanel before 80.0.5 allows local code execution in the context of a different cPanel account because of insecure cpphp execution (SEC-486). | 4.6 |
| 2019-07-30 | CVE-2018-20870 | Information Exposure vulnerability in Cpanel The WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467). | 2.1 |
| 2019-07-30 | CVE-2018-20869 | Improper Input Validation vulnerability in Cpanel cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin (SEC-465). | 7.2 |
| 2019-07-30 | CVE-2018-20868 | Cross-site Scripting vulnerability in Cpanel cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464). | 4.3 |
| 2019-07-30 | CVE-2018-20866 | Cross-site Scripting vulnerability in Cpanel cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461). | 4.3 |
| 2019-07-30 | CVE-2018-20865 | Cross-site Scripting vulnerability in Cpanel cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field (SEC-459). | 4.3 |
| 2019-07-30 | CVE-2018-20864 | Improper Input Validation vulnerability in Cpanel cPanel before 76.0.8 allows a persistent Virtual FTP accounts after removal of its associated domain (SEC-454). | 6.4 |
| 2019-07-30 | CVE-2018-20863 | Improper Input Validation vulnerability in Cpanel cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments (SEC-452). | 7.5 |
| 2019-07-30 | CVE-2018-20862 | Unspecified vulnerability in Cpanel cPanel before 76.0.8 unsafely performs PostgreSQL password changes (SEC-366). | 2.1 |