Known vulnerabilities in Apache HTTP Server - page 7

Software CPE: cpe:2.3:a:apache_foundation:apache_http_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 175
Public exploits: 31
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache HTTP Server Apache HTTP Server is affected by 175 known vulnerabilities: 4 critical, 17 high, 112 medium, 42 low Critical High Medium Low

Vulnerabilities (175)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26528 - Use of Uninitialized Variable
CVE-2020-1934
CWE-457 Medium
No
No
2.4.42 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 20 more
#VU26527 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-1927
CWE-601 Medium
No
No
2.4.42 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 17 more
#VU20386 - Use After Free
CVE-2019-10082
CWE-416 Medium
No
No
2.4.41 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU20385 - NULL Pointer Dereference
CVE-2019-10097
CWE-476 Low
No
No
2.4.41 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 14 more
#VU20384 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10092
CWE-79 Low
No
No
2.4.41 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU20374 - Improper input validation
CVE-2019-10098
CWE-20 Medium
Available
No
2.4.41 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 19 more
#VU20373 - Out-of-bounds write
CVE-2019-10081
CWE-787 Medium
No
No
2.4.41 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 11 more
#VU32392 - Permissions, Privileges, and Access Controls
CVE-2015-3185
CWE-264 Medium
No
No
2.4.14 21.07.2015 SB2015072101
SB2015101507
SB2015072709
#VU32514 - Improper input validation
CVE-2014-0117
CWE-20 Medium
No
No
2.4.10 20.07.2014 SB2014072005
SB2014072222
SB2014072403
and 1 more
#VU32515 - Resource Management Errors
CVE-2014-0118
CWE-399 Medium
No
No
2.4.10 20.07.2014 SB2014072006
SB2014072223
SB2014073104
and 3 more
#VU32516 - Heap-based Buffer Overflow
CVE-2014-0226
CWE-122 Medium
Available
No
2.4.10 20.07.2014 SB2014072007
SB2014072224
SB2014090201
and 7 more
#VU32517 - Resource Management Errors
CVE-2014-0231
CWE-399 Medium
No
No
2.4.10 20.07.2014 SB2014072008
SB2014072225
SB2014090201
and 6 more
#VU32549 - Improper input validation
CVE-2013-6438
CWE-20 Medium
No
No
2.4.8 18.03.2014 SB2014031801
SB2014041715
SB2014090201
and 7 more
#VU32550 - Improper input validation
CVE-2014-0098
CWE-20 Medium
No
No
2.4.8 18.03.2014 SB2014031802
SB2014041716
SB2014090201
and 8 more
#VU32634 - Permissions, Privileges, and Access Controls
CVE-2013-1896
CWE-264 Medium
No
No
2.2.25 10.07.2013 SB2013071001
SB2013080802
#VU32702 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3499
CWE-79 Low
No
No
2.2.24 26.02.2013 SB2013022603
SB2013041101
SB2013032621
and 2 more
#VU32703 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4558
CWE-79 Low
No
No
2.2.24 26.02.2013 SB2013022604
SB2013041102
SB2013032621
and 2 more
#VU32750 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2687
CWE-79 Low
No
No
2.4.3 22.08.2012 SB2012082201
SB2012111611
#VU32751 - Permissions, Privileges, and Access Controls
CVE-2012-0883
CWE-264 Low
No
No
2.4.2 18.04.2012 SB2012041802
SB2012111610
SB2012061401
#VU32825 - Improper input validation
CVE-2012-0021
CWE-20 Low
No
No
2.2.22 28.01.2012 SB2012012801
SB2012020104
SB2012021005
and 3 more


Showing elements 121 - 140 out of 175