Known vulnerabilities in EasyApache 4 2017-10-31 - page 3

Vendor: cPanel, Inc
Software: EasyApache
Version: 4 2017-10-31
Software CPE: cpe:2.3:a:cpanel:easyapache:*:*:*:*:*:*:*:*
Website: https://www.cpanel.com
Total vulnerabilities: 155
Public exploits: 22
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting EasyApache version 4 2017-10-31 EasyApache 4 2017-10-31 is affected by 155 vulnerabilities: 3 critical, 16 high, 106 medium, 30 low Critical High Medium Low

Vulnerabilities (155)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103686 - Improper Authentication
CVE-2025-23419		 CWE-287 Low
No
No
 4 25-5 06.02.2025 SB2025020653
SB2025020670
SB2025020671
and 17 more
#VU103646 - Integer overflow
CVE-2025-0725		 CWE-190 High
No
No
 4 25-5 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 25 more
#VU103225 - Missing release of memory after effective lifetime
CVE-2025-23085		 CWE-401 Medium
No
No
 4 25-4 22.01.2025 SB2025012252
SB2025012439
SB2025012440
and 29 more
#VU103223 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-23084		 CWE-22 Low
No
No
 4 25-4 22.01.2025 SB2025012252
SB2025012422
SB2025012423
and 11 more
#VU103222 - Permissions, Privileges, and Access Controls
CVE-2025-23083		 CWE-264 Low
No
No
 4 25-4 22.01.2025 SB2025012252
SB2025012346
SB2025012402
and 21 more
#VU102383 - Use After Free
CVE-2024-46981		 CWE-416 Medium
Public exploit available
No
 4 25-1, 4 25-2 06.01.2025 SB2025010646
SB2025010647
SB2025010901
and 39 more
#VU101893 - Permissions, Privileges, and Access Controls
CVE-2024-56337		 CWE-264 High
No
No
 4 25-5 20.12.2024 SB2024122063
SB2025011311
SB2025011801
and 45 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379		 CWE-264 Medium
Public exploit available
No
 4 2024-12-18 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU101813 - Resource exhaustion
CVE-2024-54677		 CWE-400 Medium
No
No
 4 2024-12-18 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 13 more
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053		 CWE-200 Low
No
No
 4 2024-12-18 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 32 more
#VU100674 - Buffer over-read
CVE-2024-11233		 CWE-126 Medium
No
No
 4 2024-11-25 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 16 more
#VU100673 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-11234		 CWE-93 Medium
No
No
 4 2024-11-25 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU100672 - Integer overflow
CVE-2024-11236		 CWE-190 High
No
No
 4 2024-11-25 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 12 more
#VU100671 - Buffer over-read
CVE-2024-8929		 CWE-126 Medium
No
No
 4 2024-11-25 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU100670 - Out-of-bounds read
CVE-2024-8932		 CWE-125 Medium
No
No
 4 2024-11-25 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 11 more
#VU100591 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-52318		 CWE-79 Medium
No
No
 4 2024-11-20 18.11.2024 SB2024111830
SB2024112250
SB2024112251
and 17 more
#VU100588 - Improper Authentication
CVE-2024-52316		 CWE-287 Low
No
No
 4 2024-11-20 18.11.2024 SB2024111823
SB2024112550
SB2024112832
and 36 more
#VU100587 - Resource Management Errors
CVE-2024-52317		 CWE-399 Medium
Public exploit available
No
 4 2024-11-20 18.11.2024 SB2024111823
SB2024112550
SB2024121231
and 27 more
#VU97972 - Improper input validation
CVE-2024-31228		 CWE-20 Medium
No
No
 4 2024-10-9 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 31 more
#VU97970 - Stack-based buffer overflow
CVE-2024-31449		 CWE-121 Medium
No
No
 4 2024-10-9 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 33 more


Showing elements 41 - 60 out of 155