Known vulnerabilities in EasyApache 4 2023-4-23 - page 2

Vendor: cPanel, Inc
Software: EasyApache
Version: 4 2023-4-23
Software CPE: cpe:2.3:a:cpanel:easyapache:*:*:*:*:*:*:*:*
Website: https://www.cpanel.com
Total vulnerabilities: 96
Public exploits: 15
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting EasyApache version 4 2023-4-23 EasyApache 4 2023-4-23 is affected by 96 vulnerabilities: 3 critical, 10 high, 59 medium, 24 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109885 - Improper Certificate Validation
CVE-2025-5025		 CWE-295 Medium
No
No
 4 25-18 28.05.2025 SB2025052805
SB2025060505
SB2025072409
and 4 more
#VU109884 - Improper Certificate Validation
CVE-2025-4947		 CWE-295 Low
No
No
 4 25-18 28.05.2025 SB2025052805
SB2025060505
SB2025072409
and 4 more
#VU109243 - Missing release of memory after effective lifetime
CVE-2025-23165		 CWE-401 Low
No
No
 4 25-16 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 16 more
#VU109242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-23167		 CWE-444 Medium
Public exploit available
No
 4 25-16 16.05.2025 SB2025051605
SB2025051901
SB2025051958
and 9 more
#VU109241 - Error Handling
CVE-2025-23166		 CWE-388 Medium
No
No
 4 25-16 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 28 more
#VU107885 - Resource Management Errors
CVE-2025-21605		 CWE-399 Medium
No
No
 4 25-14 23.04.2025 SB2025042342
SB2025042455
SB2025042456
and 33 more
#VU107596 - Heap-based Buffer Overflow
CVE-2025-32415		 CWE-122 High
No
No
 4 25-14 17.04.2025 SB2025041758
SB2025041880
SB2025042531
and 56 more
#VU107595 - Out-of-bounds read
CVE-2025-32414		 CWE-125 Medium
No
No
 4 25-14 17.04.2025 SB2025041758
SB2025041850
SB2025041880
and 56 more
#VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27610		 CWE-22 Medium
No
No
 4 25-9 17.03.2025 SB2025031756
SB20250317118
SB20250317119
and 15 more
#VU105795 - Improper Output Neutralization for Logs
CVE-2025-27111		 CWE-117 Medium
No
No
 4 25-8, 4 25-9 17.03.2025 SB2025031755
SB20250317119
SB2025031840
and 10 more
#VU105644 - Improper input validation
CVE-2025-1217		 CWE-20 Medium
No
No
 4 25-10 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105643 - Improper input validation
CVE-2025-1734		 CWE-20 Medium
No
No
 4 25-10 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105642 - Improper input validation
CVE-2025-1861		 CWE-20 Low
No
No
 4 25-10 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105641 - Improper Authentication
CVE-2025-1736		 CWE-287 Medium
No
No
 4 25-10 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105640 - Resource Management Errors
CVE-2025-1219		 CWE-399 Low
No
No
 4 25-10 12.03.2025 SB2025031231
SB2025031232
SB2025031233
and 20 more
#VU105639 - Use After Free
CVE-2024-11235		 CWE-416 Medium
No
No
 4 25-10 12.03.2025 SB2025031231
SB2025031232
SB2025031233
and 10 more
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 4 25-6 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 4 25-6 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103686 - Improper Authentication
CVE-2025-23419		 CWE-287 Low
No
No
 4 25-5 06.02.2025 SB2025020653
SB2025020670
SB2025020671
and 17 more
#VU101893 - Permissions, Privileges, and Access Controls
CVE-2024-56337		 CWE-264 High
No
No
 4 25-5 20.12.2024 SB2024122063
SB2025011311
SB2025011801
and 45 more


Showing elements 21 - 40 out of 96