CVE-2017-18399

LOW Year: 2017
CVSS v3 Score
3.7
Low
CVSS v2 Score
4.3
Medium
Weakness Type
CWE-264
View all →

Vulnerability Description

cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer (SEC-332).

Related Vulnerabilities

CVE-2015-7408

LOW
CVSS:3.7(Low)

The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers t...

CWE-2642015

CVE-2016-1183

LOW
CVSS:3.7(Low)

NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-exten...

CWE-2642016

CVE-2016-7903

LOW
CVSS:3.7(Low)

Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header.

CWE-2642016

CVE-2018-6674

LOW
CVSS:3.9(Low)

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated pri...

CWE-2642018

CVE-2019-3637

MEDIUM
CVSS:4.1(Medium)

Privilege Escalation vulnerability in McAfee FRP 5.x prior to 5.1.0.209 allows local users to gain elevated privileges via running McAfee Tray with elevated privileges.

CWE-2642019

CVE-2014-8571

LOW
CVSS:3.3(Low)

Apps on Huawei Ascend P6 mobile phones with software EDGE-U00 V100R001C17B508SP01 and earlier versions before V100R001C17B508SP02; EDGE-T00 V100R001C01B508SP01 and earlier versions before V100R001C01B...

CWE-2642014