Filtered by vendor Cloudlinux
Subscribe
Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2021-21956 | 1 Cloudlinux | 1 Imunify360 | 2024-11-21 | 9.3 HIGH | 7.8 HIGH |
A php unserialize vulnerability exists in the Ai-Bolit functionality of CloudLinux Inc Imunify360 5.10.2. A specially-crafted malformed file can lead to potential arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability. | |||||
CVE-2020-36772 | 1 Cloudlinux | 1 Cagefs | 2024-11-21 | N/A | 4.4 MEDIUM |
CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitrary files of certain file formats outside the CageFS environment. | |||||
CVE-2020-36771 | 1 Cloudlinux | 1 Cagefs | 2024-11-21 | N/A | 7.8 HIGH |
CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and gain code execution as another user. |