60.0.34

DATE	CVE	VULNERABILITY TITLE	RISK
2019-07-30	CVE-2018-20864	Improper Input Validation vulnerability in Cpanel cPanel before 76.0.8 allows a persistent Virtual FTP accounts after removal of its associated domain (SEC-454). network low complexity cpanel CWE-20	6.5
2019-07-30	CVE-2018-20863	Improper Input Validation vulnerability in Cpanel cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments (SEC-452). network low complexity cpanel CWE-20 critical	9.8
2019-07-30	CVE-2018-20862	Unspecified vulnerability in Cpanel cPanel before 76.0.8 unsafely performs PostgreSQL password changes (SEC-366). local low complexity cpanel	7.8
2019-07-30	CVE-2019-14392	Unspecified vulnerability in Cpanel cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching (SEC-501). network low complexity cpanel	8.8
2019-07-30	CVE-2018-20867	Open Redirect vulnerability in Cpanel cPanel before 76.0.8 has an open redirect when resetting connections (SEC-462). network low complexity cpanel CWE-601	6.1
2019-07-30	CVE-2019-14391	Unspecified vulnerability in Cpanel cPanel before 82.0.2 does not properly enforce Reseller package creation ACLs (SEC-514). local low complexity cpanel	3.3
2019-07-30	CVE-2019-14390	Cross-site Scripting vulnerability in Cpanel cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface (SEC-512). network low complexity cpanel CWE-79	5.4
2019-07-30	CVE-2019-14389	Unspecified vulnerability in Cpanel cPanel before 82.0.2 allows local users to discover the MySQL root password (SEC-510). local low complexity cpanel	7.8
2019-07-30	CVE-2019-14388	Unspecified vulnerability in Cpanel cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled (SEC-507). network low complexity cpanel	7.5
2019-07-30	CVE-2019-14387	Cross-site Scripting vulnerability in Cpanel cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates (SEC-506). network low complexity cpanel CWE-79	6.1