Vulnerabilities > Cpanel > Low
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-08-01 | CVE-2018-20902 | Information Exposure vulnerability in Cpanel cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation (SEC-408). | 2.1 |
| 2019-08-01 | CVE-2018-20908 | Incorrect Permission Assignment for Critical Resource vulnerability in Cpanel cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435). | 2.1 |
| 2019-08-01 | CVE-2018-20909 | Incorrect Permission Assignment for Critical Resource vulnerability in Cpanel cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338). | 3.6 |
| 2019-08-01 | CVE-2018-20913 | Information Exposure vulnerability in Cpanel cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364). | 3.5 |
| 2019-08-01 | CVE-2018-20915 | Cross-site Scripting vulnerability in Cpanel cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369). | 3.5 |
| 2019-08-01 | CVE-2018-20916 | Cross-site Scripting vulnerability in Cpanel cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370). | 3.5 |
| 2019-08-01 | CVE-2018-20917 | Improper Input Validation vulnerability in Cpanel cPanel before 70.0.23 allows any user to disable Solr (SEC-371). | 2.1 |
| 2019-08-01 | CVE-2018-20889 | Information Exposure vulnerability in Cpanel cPanel before 74.0.0 allows certain file-read operations via password file caching (SEC-425). | 3.6 |
| 2019-08-01 | CVE-2018-20893 | Improper Input Validation vulnerability in Cpanel cPanel before 74.0.0 allows file-rename operations during account renames (SEC-442). | 2.1 |
| 2019-08-01 | CVE-2018-20894 | Information Exposure vulnerability in Cpanel cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories (SEC-443). | 2.1 |