Known vulnerabilities in EasyApache 4 - page 2

Software: EasyApache
Version: 4
Software CPE: cpe:2.3:a:cpanel:easyapache:*:*:*:*:*:*:*:*
Total vulnerabilities: 118
Public exploits: 17
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting EasyApache version 4 EasyApache 4 is affected by 118 vulnerabilities: 3 critical, 14 high, 80 medium, 21 low Critical High Medium Low

Vulnerabilities (118)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379
CWE-264 Medium
Public exploit available
No
4 2024-12-18 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053
CWE-200 Low
No
No
4 2024-12-18 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 32 more
#VU100674 - Buffer over-read
CVE-2024-11233
CWE-126 Medium
No
No
4 2024-11-25 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 16 more
#VU100673 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-11234
CWE-93 Medium
No
No
4 2024-11-25 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU100672 - Integer overflow
CVE-2024-11236
CWE-190 High
No
No
4 2024-11-25 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 12 more
#VU100671 - Buffer over-read
CVE-2024-8929
CWE-126 Medium
No
No
4 2024-11-25 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU100670 - Out-of-bounds read
CVE-2024-8932
CWE-125 Medium
No
No
4 2024-11-25 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 11 more
#VU100591 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-52318
CWE-79 Medium
No
No
4 2024-11-20 18.11.2024 SB2024111830
SB2024112250
SB2024112251
and 17 more
#VU100588 - Improper Authentication
CVE-2024-52316
CWE-287 Low
No
No
4 2024-11-20 18.11.2024 SB2024111823
SB2024112550
SB2024112832
and 36 more
#VU100587 - Resource Management Errors
CVE-2024-52317
CWE-399 Medium
Public exploit available
No
4 2024-11-20 18.11.2024 SB2024111823
SB2024112550
SB2024121231
and 27 more
#VU97972 - Improper input validation
CVE-2024-31228
CWE-20 Medium
No
No
4 2024-10-9 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 31 more
#VU97970 - Stack-based buffer overflow
CVE-2024-31449
CWE-121 Medium
No
No
4 2024-10-9 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 33 more
#VU97748 - Improper input validation
CVE-2024-8925
CWE-20 Medium
No
No
4 2024-10-2 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 16 more
#VU97747 - Insufficient Logging
CVE-2024-9026
CWE-778 Low
No
No
4 2024-10-2 27.09.2024 SB2024092724
SB2024100148
SB2024101209
and 13 more
#VU97746 - Security Features
CVE-2024-8927
CWE-254 Medium
No
No
4 2024-10-2 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 18 more
#VU97691 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-8926
CWE-78 High
Public exploit available
No
4 2024-10-2 25.09.2024 SB2024092519
SB2024092520
SB2024092524
and 7 more
#VU97150 - Improper Certificate Validation
CVE-2024-8096
CWE-295 Low
No
No
4 2024-9-18 11.09.2024 SB2024091127
SB2024091141
SB2024091142
and 11 more
#VU96554 - Incorrect Default Permissions
CVE-2023-49582
CWE-276 Low
No
No
4 25-16, 4 2024-8-29 26.08.2024 SB2024082682
SB2024082937
SB2024082938
and 21 more
#VU96020 - Out-of-bounds read
CVE-2024-7347
CWE-125 Medium
No
No
4 2024-8-21 14.08.2024 SB2024081481
SB2024081706
SB2024081707
and 25 more
#VU91106 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-4577
CWE-78 Critical
Public exploit available
Exploited
4 2024-6-10, 4 2024-10-2 04.06.2024 SB2024060501
SB2024060502
SB2024060503
and 12 more


Showing elements 21 - 40 out of 118