CVE-2018-20927

CVSS v3 Score
3.8
Low
CVSS v2 Score
2.1
Low

Vulnerability Description

cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).

CVSS:3.7(Low)

A vulnerability was found in Moodle 3.6 before 3.6.7 and 3.7 before 3.7.3, where tokens used to fetch inline atachments in email notifications were not disabled when a user's account was no longer act...

CVSS:3.7(Low)

Zulip is an open-source team collaboration tool with unique topic-based threading. In the event that 1: `ZulipLDAPAuthBackend` and an external authentication backend (any aside of `ZulipLDAPAuthBacken...

CVSS:3.7(Low)

The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not yet initialized.

CVSS:3.6(Low)

Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a configuration different from the one mandated by the system...

CVSS:4.0(Medium)

Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and iPadOS 17. The issue was addressed with improved UI.

CVSS:3.5(Low)

Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file.