Known vulnerabilities in EasyApache 4 - page 5

Vendor: cPanel, Inc
Software: EasyApache
Version: 4
Software CPE: cpe:2.3:a:cpanel:easyapache:*:*:*:*:*:*:*:*
Website: https://www.cpanel.com
Total vulnerabilities: 118
Public exploits: 17
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting EasyApache version 4 EasyApache 4 is affected by 118 vulnerabilities: 3 critical, 14 high, 80 medium, 21 low Critical High Medium Low

Vulnerabilities (118)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60939 - Untrusted Search Path
CVE-2022-22943		 CWE-426 Low
No
No
 4 2022-3-16 02.03.2022 SB2022030202
SB2022032127
#VU60707 - Use After Free
CVE-2021-21708		 CWE-416 Medium
Public exploit available
No
 4 2022-2-23 18.02.2022 SB2022021804
SB2022021813
SB2022022118
and 19 more
#VU58331 - Improper input validation
CVE-2021-21707		 CWE-20 Medium
No
No
 4 2021-11-23 23.11.2021 SB2021112317
SB2021112318
SB2022011821
and 21 more
#VU57656 - Out-of-bounds write
CVE-2021-21703		 CWE-787 Low
No
No
 4 2021-20-27 26.10.2021 SB2021102621
SB2021102719
SB2022012745
and 20 more
#VU56905 - Absolute Path Traversal
CVE-2021-21706		 CWE-36 Medium
No
No
 4 2021-9-29 29.09.2021 SB2021092901
SB2021093001
SB2022111831
and 1 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 4 2021-9-22 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56680 - Out-of-bounds read
CVE-2021-36160		 CWE-125 Medium
No
No
 4 2021-9-22 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 22 more
#VU56679 - Memory corruption
CVE-2021-39275		 CWE-119 Medium
No
No
 4 2021-9-22 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Public exploit available
Exploited
 4 2021-9-22 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU56615 - Insufficient Verification of Data Authenticity
CVE-2021-22947		 CWE-345 Medium
No
No
 4 2021-9-22 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 43 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946		 CWE-319 Medium
No
No
 4 2021-9-22 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU56610 - Double Free
CVE-2021-22945		 CWE-415 Low
No
No
 4 2021-9-22 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 20 more
#VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33193		 CWE-444 Medium
No
No
 4 2021-9-22 13.09.2021 SB2021091317
SB2021091707
SB2021092301
and 24 more
#VU56064 - Out-of-bounds read
CVE-2021-3712		 CWE-125 Medium
No
No
 4 2021-9-1 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more
#VU56063 - Memory corruption
CVE-2021-3711		 CWE-119 High
No
No
 4 2021-9-1 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 53 more
#VU56059 - Out-of-bounds read
CVE-2021-35940		 CWE-125 Medium
No
No
 4 2021-9-1 24.08.2021 SB2021082410
SB2021090120
SB2021083025
and 5 more
#VU55148 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-22922		 CWE-611 Medium
No
No
 4 2021-7-28 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 27 more
#VU55145 - Insufficiently Protected Credentials
CVE-2021-22923		 CWE-522 Medium
No
No
 4 2021-7-28 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 28 more
#VU52299 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-22720		 CWE-22 Medium
No
No
 4 2022-3-16 16.04.2021 SB2021041628
SB2022032127
#VU52297 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-22719		 CWE-22 Medium
No
No
 4 2022-3-16 16.04.2021 SB2021041628
SB2022032127


Showing elements 81 - 100 out of 118