Vulnerabilities > Cpanel > Cpanel > 60.0.34
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-07-30 | CVE-2019-14397 | Unspecified vulnerability in Cpanel cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call (SEC-496). | 5.3 |
| 2019-07-30 | CVE-2019-14396 | Unspecified vulnerability in Cpanel API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data (SEC-495). | 3.3 |
| 2019-07-30 | CVE-2019-14395 | Incorrect Permission Assignment for Critical Resource vulnerability in Cpanel cPanel before 80.0.5 uses world-readable permissions for the Queueprocd log (SEC-494). | 3.3 |
| 2019-07-30 | CVE-2019-14394 | Unspecified vulnerability in Cpanel cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetch_ssl_certificates_for_fqdns API (SEC-489). | 5.5 |
| 2019-07-30 | CVE-2019-14393 | Unspecified vulnerability in Cpanel cPanel before 80.0.5 allows local code execution in the context of a different cPanel account because of insecure cpphp execution (SEC-486). | 5.3 |
| 2019-07-30 | CVE-2018-20870 | Information Exposure vulnerability in Cpanel The WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467). | 5.5 |
| 2019-07-30 | CVE-2018-20869 | Improper Input Validation vulnerability in Cpanel cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin (SEC-465). | 7.8 |
| 2019-07-30 | CVE-2018-20868 | Cross-site Scripting vulnerability in Cpanel cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464). | 6.1 |
| 2019-07-30 | CVE-2018-20866 | Cross-site Scripting vulnerability in Cpanel cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461). | 6.1 |
| 2019-07-30 | CVE-2018-20865 | Cross-site Scripting vulnerability in Cpanel cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field (SEC-459). | 6.1 |