Known vulnerabilities in EasyApache 4 2024-4-8 - page 4

Software: EasyApache
Version: 4 2024-4-8
Software CPE: cpe:2.3:a:cpanel:easyapache:*:*:*:*:*:*:*:*
Total vulnerabilities: 91
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting EasyApache version 4 2024-4-8 EasyApache 4 2024-4-8 is affected by 91 vulnerabilities: 3 critical, 9 high, 56 medium, 23 low Critical High Medium Low

Vulnerabilities (91)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97972 - Improper input validation
CVE-2024-31228
CWE-20 Medium
No
No
4 2024-10-9 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 31 more
#VU97970 - Stack-based buffer overflow
CVE-2024-31449
CWE-121 Medium
No
No
4 2024-10-9 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 33 more
#VU97748 - Improper input validation
CVE-2024-8925
CWE-20 Medium
No
No
4 2024-10-2 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 16 more
#VU97747 - Insufficient Logging
CVE-2024-9026
CWE-778 Low
No
No
4 2024-10-2 27.09.2024 SB2024092724
SB2024100148
SB2024101209
and 13 more
#VU97746 - Security Features
CVE-2024-8927
CWE-254 Medium
No
No
4 2024-10-2 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 18 more
#VU97691 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-8926
CWE-78 High
Public exploit available
No
4 2024-10-2 25.09.2024 SB2024092519
SB2024092520
SB2024092524
and 7 more
#VU97150 - Improper Certificate Validation
CVE-2024-8096
CWE-295 Low
No
No
4 2024-9-18 11.09.2024 SB2024091127
SB2024091141
SB2024091142
and 11 more
#VU96554 - Incorrect Default Permissions
CVE-2023-49582
CWE-276 Low
No
No
4 25-16, 4 2024-8-29 26.08.2024 SB2024082682
SB2024082937
SB2024082938
and 21 more
#VU96020 - Out-of-bounds read
CVE-2024-7347
CWE-125 Medium
No
No
4 2024-8-21 14.08.2024 SB2024081481
SB2024081706
SB2024081707
and 25 more
#VU95131 - Out-of-bounds read
CVE-2024-7264
CWE-125 Medium
No
No
4 2024-8-12 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 43 more
#VU93880 - Server-Side Request Forgery (SSRF)
CVE-2024-22020
CWE-918 Medium
No
No
4 2024-7-10 09.07.2024 SB2024070937
SB2024071636
SB20240717119
and 30 more
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573
CWE-918 Medium
No
No
4 2024-7-10 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93544 - Improper input validation
CVE-2024-38477
CWE-20 Medium
No
No
4 2024-7-10 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476
CWE-918 High
No
No
4 2024-7-10 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93542 - Improper input validation
CVE-2024-38475
CWE-20 Critical
Public exploit available
No
4 2024-7-10 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93541 - Improper input validation
CVE-2024-38474
CWE-20 Medium
No
No
4 2024-7-10 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 57 more
#VU93540 - Improper input validation
CVE-2024-38473
CWE-20 Medium
Public exploit available
No
4 2024-7-10 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU93539 - Server-Side Request Forgery (SSRF)
CVE-2024-38472
CWE-918 Medium
Public exploit available
No
4 2024-7-10 01.07.2024 SB2024070155
SB20240702144
SB2024081362
and 11 more
#VU91106 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-4577
CWE-78 Critical
Public exploit available
Exploited
4 2024-6-10, 4 2024-10-2 04.06.2024 SB2024060501
SB2024060502
SB2024060503
and 12 more
#VU89861 - Use After Free
CVE-2024-4741
CWE-416 Medium
No
No
4 2024-7-10 29.05.2024 SB2024052912
SB2024060803
SB2024060804
and 88 more


Showing elements 61 - 80 out of 91