Known vulnerabilities in Apache HTTP Server - page 9

Software CPE: cpe:2.3:a:apache_foundation:apache_http_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 175
Public exploits: 31
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache HTTP Server Apache HTTP Server is affected by 175 known vulnerabilities: 4 critical, 17 high, 112 medium, 42 low Critical High Medium Low

Vulnerabilities (175)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU10953 - Improper input validation
CVE-2016-8612
CWE-20 Low
No
No
- 12.03.2018 SB2016121509
#VU8504 - Use After Free
CVE-2017-9798
CWE-416 Low
Available
No
- 19.09.2017 SB2017092001
SB2017091801
SB2017092117
and 28 more
#VU7518 - Use After Free
CVE-2017-9789
CWE-416 Medium
No
No
- 14.07.2017 SB2017071403
SB2017071307
SB2017071409
and 3 more
#VU7517 - Exposure of sensitive information to an unauthorized actor
CVE-2017-9788
CWE-200 Low
No
No
- 13.07.2017 SB2017062001
SB2017071403
SB2017071307
and 17 more
#VU7119 - Out-of-bounds read
CVE-2017-7679
CWE-125 Medium
Available
No
- 20.06.2017 SB2017062001
SB2017062807
SB2017063012
and 26 more
#VU7116 - Authentication Bypass Issues
CVE-2017-3169
CWE-592 Medium
Available
No
- 20.06.2017 SB2017062001
SB2017062807
SB2017063012
and 26 more
#VU7115 - Authentication Bypass Issues
CVE-2017-3167
CWE-592 Medium
No
No
- 20.06.2017 SB2017062001
SB2017062807
SB2017063012
and 25 more
#VU7117 - Out-of-bounds read
CVE-2017-7668
CWE-125 Medium
No
No
- 20.06.2017 SB2017062001
SB2017062807
SB2017063012
and 17 more
#VU2934 - Resource exhaustion
CVE-2011-3192
CWE-400 High
Available
No
- 27.12.2016 SB2011082301
SB2015090101
SB2011090901
and 9 more
#VU1961 - Improper input validation
CVE-2016-8743
CWE-20 Medium
No
No
- 21.12.2016 SB2016122101
SB2017060704
SB2017073113
and 8 more
#VU1886 - Improper input validation
CVE-2016-2161
CWE-20 Medium
No
No
- 21.12.2016 SB2016122101
SB2017060704
SB2017050921
and 6 more
#VU1800 - Incorrect Behavior Order
CVE-2016-0736
CWE-696 Low
Available
No
- 21.12.2016 SB2016122101
SB2017060704
SB2017050921
and 6 more
#VU1209 - Missing release of memory after effective lifetime
CVE-2016-8740
CWE-401 Low
Available
No
- 05.12.2016 SB2016120601
SB2017060704
SB2016122402
and 3 more
#VU337 - Improper Access Control
CVE-2016-5387
CWE-284 Medium
No
No
- 20.08.2016 SB2016080101
SB2016122101
SB2016071805
and 12 more
#VU91 - Improper Authentication
CVE-2016-4979
CWE-287 Medium
No
No
- 06.07.2016 SB2016070601
SB2016070712
SB2016070808


Showing elements 161 - 180 out of 175