Known vulnerabilities in EasyApache 4 2022-1-16 - page 6

Vendor: cPanel, Inc
Software: EasyApache
Version: 4 2022-1-16
Software CPE: cpe:2.3:a:cpanel:easyapache:*:*:*:*:*:*:*:*
Website: https://www.cpanel.com
Total vulnerabilities: 112
Public exploits: 17
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting EasyApache version 4 2022-1-16 EasyApache 4 2022-1-16 is affected by 112 vulnerabilities: 3 critical, 12 high, 72 medium, 25 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 4 2022-6-22 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU62768 - Uncontrolled Memory Allocation
CVE-2022-1473		 CWE-789 Low
No
No
 4 2022-5-11 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 18 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Public exploit available
No
 4 2022-5-11 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Public exploit available
No
 4 2022-3-17, 4 2022-3-23, 4 2022-5-11 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61287 - Improper input validation
CVE-2022-22719		 CWE-20 Medium
No
No
 4 2022-3-16 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 32 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 4 2022-3-16 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61285 - Integer overflow
CVE-2022-22721		 CWE-190 High
No
No
 4 2022-3-16 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU61284 - Out-of-bounds write
CVE-2022-23943		 CWE-787 High
No
No
 4 2022-3-16 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more
#VU60939 - Untrusted Search Path
CVE-2022-22943		 CWE-426 Low
No
No
 4 2022-3-16 02.03.2022 SB2022030202
SB2022032127
#VU60707 - Use After Free
CVE-2021-21708		 CWE-416 Medium
Public exploit available
No
 4 2022-2-23 18.02.2022 SB2022021804
SB2022021813
SB2022022118
and 19 more
#VU52299 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-22720		 CWE-22 Medium
No
No
 4 2022-3-16 16.04.2021 SB2021041628
SB2022032127
#VU52297 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-22719		 CWE-22 Medium
No
No
 4 2022-3-16 16.04.2021 SB2021041628
SB2022032127


Showing elements 101 - 120 out of 112