Vulnerabilities > Cpanel > Low

DATE CVE VULNERABILITY TITLE RISK
2019-07-30 CVE-2019-14412 Use of Externally-Controlled Format String vulnerability in Cpanel
Maketext in cPanel before 78.0.2 allows format-string injection in the DCV check_domains_via_dns UAPI (SEC-474).
local
low complexity
cpanel CWE-134
3.3
2019-07-30 CVE-2019-14414 Unspecified vulnerability in Cpanel
In cPanel before 78.0.2, a Userdata cache temporary file can conflict with domains (SEC-478).
local
low complexity
cpanel
3.3
2019-07-30 CVE-2019-14391 Unspecified vulnerability in Cpanel
cPanel before 82.0.2 does not properly enforce Reseller package creation ACLs (SEC-514).
local
low complexity
cpanel
3.3