Known vulnerabilities in EasyApache 4 2024-3-6 - page 2

Vendor: cPanel, Inc
Software: EasyApache
Version: 4 2024-3-6
Software CPE: cpe:2.3:a:cpanel:easyapache:*:*:*:*:*:*:*:*
Website: https://www.cpanel.com
Total vulnerabilities: 91
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting EasyApache version 4 2024-3-6 EasyApache 4 2024-3-6 is affected by 91 vulnerabilities: 3 critical, 9 high, 56 medium, 23 low Critical High Medium Low

Vulnerabilities (91)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110075 - Resource exhaustion
CVE-2025-48866		 CWE-400 Medium
No
No
 4 25-18 02.06.2025 SB2025060248
SB2025060505
SB2025060901
and 9 more
#VU109658 - Resource exhaustion
CVE-2025-47947		 CWE-400 Medium
No
No
 4 25-18 22.05.2025 SB2025052240
SB2025052973
SB2025052974
and 20 more
#VU109243 - Missing release of memory after effective lifetime
CVE-2025-23165		 CWE-401 Low
No
No
 4 25-16 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 16 more
#VU109242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-23167		 CWE-444 Medium
Public exploit available
No
 4 25-16 16.05.2025 SB2025051605
SB2025051901
SB2025051958
and 9 more
#VU109241 - Error Handling
CVE-2025-23166		 CWE-388 Medium
No
No
 4 25-16 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 28 more
#VU107885 - Resource Management Errors
CVE-2025-21605		 CWE-399 Medium
No
No
 4 25-14 23.04.2025 SB2025042342
SB2025042455
SB2025042456
and 33 more
#VU107596 - Heap-based Buffer Overflow
CVE-2025-32415		 CWE-122 High
No
No
 4 25-14 17.04.2025 SB2025041758
SB2025041880
SB2025042531
and 56 more
#VU107595 - Out-of-bounds read
CVE-2025-32414		 CWE-125 Medium
No
No
 4 25-14 17.04.2025 SB2025041758
SB2025041850
SB2025041880
and 56 more
#VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27610		 CWE-22 Medium
No
No
 4 25-9 17.03.2025 SB2025031756
SB20250317118
SB20250317119
and 15 more
#VU105795 - Improper Output Neutralization for Logs
CVE-2025-27111		 CWE-117 Medium
No
No
 4 25-8, 4 25-9 17.03.2025 SB2025031755
SB20250317119
SB2025031840
and 10 more
#VU105644 - Improper input validation
CVE-2025-1217		 CWE-20 Medium
No
No
 4 25-10 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105643 - Improper input validation
CVE-2025-1734		 CWE-20 Medium
No
No
 4 25-10 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105642 - Improper input validation
CVE-2025-1861		 CWE-20 Low
No
No
 4 25-10 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105641 - Improper Authentication
CVE-2025-1736		 CWE-287 Medium
No
No
 4 25-10 12.03.2025 SB2025031234
SB2025031232
SB2025031231
and 21 more
#VU105640 - Resource Management Errors
CVE-2025-1219		 CWE-399 Low
No
No
 4 25-10 12.03.2025 SB2025031231
SB2025031232
SB2025031233
and 20 more
#VU105639 - Use After Free
CVE-2024-11235		 CWE-416 Medium
No
No
 4 25-10 12.03.2025 SB2025031231
SB2025031232
SB2025031233
and 10 more
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 4 25-6 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 4 25-6 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103648 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0167		 CWE-200 Low
No
No
 4 25-5 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 20 more
#VU103647 - Resource Management Errors
CVE-2025-0665		 CWE-399 Low
No
No
 4 25-5 05.02.2025 SB2025020531
SB2025020601
SB2025022022
and 5 more


Showing elements 21 - 40 out of 91