Known vulnerabilities in Apache HTTP Server - page 7

Software CPE: cpe:2.3:a:apache_foundation:apache_http_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 155
Public exploits: 31
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache HTTP Server Apache HTTP Server is affected by 155 known vulnerabilities: 4 critical, 15 high, 101 medium, 35 low Critical High Medium Low

Vulnerabilities (155)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU11287 - NULL Pointer Dereference
CVE-2018-1302
CWE-476 Medium
No
No
2.4.32 27.03.2018 SB2018032703
SB2018040502
SB2018050401
and 7 more
#VU10953 - Improper input validation
CVE-2016-8612
CWE-20 Low
No
No
- 12.03.2018 SB2016121509
#VU8504 - Use After Free
CVE-2017-9798
CWE-416 Low
Available
No
- 19.09.2017 SB2017092001
SB2017091801
SB2017092117
and 28 more
#VU7518 - Use After Free
CVE-2017-9789
CWE-416 Medium
No
No
- 14.07.2017 SB2017071403
SB2017071307
SB2017071409
and 3 more
#VU7517 - Exposure of sensitive information to an unauthorized actor
CVE-2017-9788
CWE-200 Low
No
No
- 13.07.2017 SB2017062001
SB2017071403
SB2017071307
and 17 more
#VU7119 - Out-of-bounds read
CVE-2017-7679
CWE-125 Medium
Available
No
- 20.06.2017 SB2017062001
SB2017062807
SB2017063012
and 26 more
#VU7116 - Authentication Bypass Issues
CVE-2017-3169
CWE-592 Medium
Available
No
- 20.06.2017 SB2017062001
SB2017062807
SB2017063012
and 26 more
#VU7115 - Authentication Bypass Issues
CVE-2017-3167
CWE-592 Medium
No
No
- 20.06.2017 SB2017062001
SB2017062807
SB2017063012
and 25 more
#VU7117 - Out-of-bounds read
CVE-2017-7668
CWE-125 Medium
No
No
- 20.06.2017 SB2017062001
SB2017062807
SB2017063012
and 17 more
#VU1961 - Improper input validation
CVE-2016-8743
CWE-20 Medium
No
No
- 21.12.2016 SB2016122101
SB2017060704
SB2017073113
and 8 more
#VU1886 - Improper input validation
CVE-2016-2161
CWE-20 Medium
No
No
- 21.12.2016 SB2016122101
SB2017060704
SB2017050921
and 6 more
#VU1800 - Incorrect Behavior Order
CVE-2016-0736
CWE-696 Low
Available
No
- 21.12.2016 SB2016122101
SB2017060704
SB2017050921
and 6 more
#VU1209 - Missing release of memory after effective lifetime
CVE-2016-8740
CWE-401 Low
Available
No
- 05.12.2016 SB2016120601
SB2017060704
SB2016122402
and 3 more
#VU337 - Improper Access Control
CVE-2016-5387
CWE-284 Medium
No
No
- 20.08.2016 SB2016080101
SB2016122101
SB2016071805
and 12 more
#VU91 - Improper Authentication
CVE-2016-4979
CWE-287 Medium
No
No
- 06.07.2016 SB2016070601
SB2016070712
SB2016070808
#VU32392 - Permissions, Privileges, and Access Controls
CVE-2015-3185
CWE-264 Medium
No
No
2.4.14 21.07.2015 SB2015072101
SB2015101507
#VU33821 - Improper input validation
CVE-2015-3183
CWE-20 Medium
No
No
2.4.14 21.07.2015 SB2015072102
SB2015101506
SB2015081708
and 1 more
#VU32514 - Improper input validation
CVE-2014-0117
CWE-20 Medium
No
No
2.4.10 20.07.2014 SB2014072005
SB2014072222
SB2014072403
#VU32515 - Resource Management Errors
CVE-2014-0118
CWE-399 Medium
No
No
2.4.10 20.07.2014 SB2014072006
SB2014072223
SB2014073104
and 2 more
#VU32516 - Heap-based Buffer Overflow
CVE-2014-0226
CWE-122 Medium
Available
No
2.4.10 20.07.2014 SB2014072007
SB2014072224
SB2014090201
and 6 more


Showing elements 121 - 140 out of 155