cPanel before 80.0.5 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-498)

cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching (SEC-501)

Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin

Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints

SSL verification is disabled in the DNS Cluster system

In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files (SEC-588)

In cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587)

cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540)

The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore (SEC-58)

The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries (SEC-187)

cPanel before 60.0.25 allows file-create and file-chmod operations during ModSecurity Audit logfile processing (SEC-165)

cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100)

cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92)

cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80)

cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79)

cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78)

cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76)

cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71)

cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API (SEC-66)

cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65)

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138)

cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path (SEC-225)

cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221)

cPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220)

cPanel before 64.0.21 allows code execution in the context of the root account via a SET_VHOST_LANG_PACKAGE multilang adminbin call (SEC-237)

In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234)

cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302)

In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears (SEC-299)

cPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333)

cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups (SEC-322)

cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315)

cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309)

cPanel before 78.0.18 allows local users to escalate to root access because of userdata cache misparsing (SEC-479)

cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin (SEC-465)

cPanel before 76.0.8 unsafely performs PostgreSQL password changes (SEC-366)

cPanel before 82.0.2 allows local users to discover the MySQL root password (SEC-510)

In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586)

cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579)

cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578)

The email quota cache in cPanel before 90.0.10 allows overwriting of files

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification (SEC-557)

cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561)

cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558)

In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM (SEC-552)

In cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM (SEC-551)

In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM (SEC-550)

cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism (SEC-491)

cPanel before 57.9999.105 allows newline injection via LOC records (CPANEL-6923)

cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192)

Leech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205)