Vulnerabilities (CVE)

Filtered by vendor Cloudlinux Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-36772 1 Cloudlinux 1 Cagefs 2024-03-28 N/A 4.4 MEDIUM
CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitrary files of certain file formats outside the CageFS environment.
CVE-2020-36771 1 Cloudlinux 1 Cagefs 2024-03-28 N/A 7.8 HIGH
CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and gain code execution as another user.
CVE-2021-21956 1 Cloudlinux 1 Imunify360 2023-12-10 9.3 HIGH 7.8 HIGH
A php unserialize vulnerability exists in the Ai-Bolit functionality of CloudLinux Inc Imunify360 5.10.2. A specially-crafted malformed file can lead to potential arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.