Known vulnerabilities in EasyApache 4 2021-3-31 - page 2

Vendor: cPanel, Inc
Software: EasyApache
Version: 4 2021-3-31
Software CPE: cpe:2.3:a:cpanel:easyapache:*:*:*:*:*:*:*:*
Website: https://www.cpanel.com
Total vulnerabilities: 148
Public exploits: 19
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting EasyApache version 4 2021-3-31 EasyApache 4 2021-3-31 is affected by 148 vulnerabilities: 3 critical, 16 high, 99 medium, 30 low Critical High Medium Low

Vulnerabilities (148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109885 - Improper Certificate Validation
CVE-2025-5025		 CWE-295 Medium
No
No
 4 25-18 28.05.2025 SB2025052805
SB2025060505
SB2025072409
and 4 more
#VU109884 - Improper Certificate Validation
CVE-2025-4947		 CWE-295 Low
No
No
 4 25-18 28.05.2025 SB2025052805
SB2025060505
SB2025072409
and 4 more
#VU109243 - Missing release of memory after effective lifetime
CVE-2025-23165		 CWE-401 Low
No
No
 4 25-16 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 16 more
#VU109242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-23167		 CWE-444 Medium
Public exploit available
No
 4 25-16 16.05.2025 SB2025051605
SB2025051901
SB2025051958
and 9 more
#VU109241 - Error Handling
CVE-2025-23166		 CWE-388 Medium
No
No
 4 25-16 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 28 more
#VU107885 - Resource Management Errors
CVE-2025-21605		 CWE-399 Medium
No
No
 4 25-14 23.04.2025 SB2025042342
SB2025042455
SB2025042456
and 33 more
#VU107596 - Heap-based Buffer Overflow
CVE-2025-32415		 CWE-122 High
No
No
 4 25-14 17.04.2025 SB2025041758
SB2025041880
SB2025042531
and 56 more
#VU107595 - Out-of-bounds read
CVE-2025-32414		 CWE-125 Medium
No
No
 4 25-14 17.04.2025 SB2025041758
SB2025041850
SB2025041880
and 56 more
#VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27610		 CWE-22 Medium
No
No
 4 25-9 17.03.2025 SB2025031756
SB20250317118
SB20250317119
and 15 more
#VU105795 - Improper Output Neutralization for Logs
CVE-2025-27111		 CWE-117 Medium
No
No
 4 25-8, 4 25-9 17.03.2025 SB2025031755
SB20250317119
SB2025031840
and 10 more
#VU105644 - Improper input validation
CVE-2025-1217		 CWE-20 Medium
No
No
 4 25-10 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105643 - Improper input validation
CVE-2025-1734		 CWE-20 Medium
No
No
 4 25-10 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105642 - Improper input validation
CVE-2025-1861		 CWE-20 Low
No
No
 4 25-10 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105641 - Improper Authentication
CVE-2025-1736		 CWE-287 Medium
No
No
 4 25-10 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105640 - Resource Management Errors
CVE-2025-1219		 CWE-399 Low
No
No
 4 25-10 12.03.2025 SB2025031231
SB2025031232
SB2025031233
and 20 more
#VU105639 - Use After Free
CVE-2024-11235		 CWE-416 Medium
No
No
 4 25-10 12.03.2025 SB2025031231
SB2025031232
SB2025031233
and 10 more
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 4 25-6 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 4 25-6 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103648 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0167		 CWE-200 Low
No
No
 4 25-5 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 20 more
#VU103647 - Resource Management Errors
CVE-2025-0665		 CWE-399 Low
No
No
 4 25-5 05.02.2025 SB2025020531
SB2025020601
SB2025022022
and 5 more


Showing elements 21 - 40 out of 148