Known vulnerabilities in EasyApache - page 6

Software: EasyApache
Software CPE: cpe:2.3:a:cpanel:easyapache:*:*:*:*:*:*:*:*
Total vulnerabilities: 235
Public exploits: 35
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EasyApache EasyApache is affected by 235 known vulnerabilities: 4 critical, 22 high, 159 medium, 50 low Critical High Medium Low

Vulnerabilities (235)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93883 - Improper input validation
CVE-2024-37372
CWE-20 Low
No
No
4 2024-7-10 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 7 more
#VU93882 - Permissions, Privileges, and Access Controls
CVE-2024-22018
CWE-264 Low
No
No
4 2024-7-10 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 15 more
#VU93881 - Permissions, Privileges, and Access Controls
CVE-2024-36137
CWE-264 Low
No
No
4 2024-7-10 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 23 more
#VU93880 - Server-Side Request Forgery (SSRF)
CVE-2024-22020
CWE-918 Medium
No
No
4 2024-7-10 09.07.2024 SB2024070937
SB2024071636
SB20240717119
and 30 more
#VU93879 - Command injection
CVE-2024-36138
CWE-77 Medium
No
No
4 2024-7-10 09.07.2024 SB2024070937
SB2024071636
SB20240717119
and 12 more
#VU93729 - Exposure of sensitive information to an unauthorized actor
CVE-2024-39884
CWE-200 Medium
No
No
4 2024-7-10 03.07.2024 SB2024070342
SB2024070401
SB2024070890
and 21 more
#VU93539 - Server-Side Request Forgery (SSRF)
CVE-2024-38472
CWE-918 Medium
Available
No
4 2024-7-10 01.07.2024 SB2024070155
SB20240702144
SB2024081362
and 11 more
#VU93538 - NULL Pointer Dereference
CVE-2024-36387
CWE-476 Medium
No
No
4 2024-7-10 01.07.2024 SB2024070155
SB20240702144
SB2024070890
and 18 more
#VU91109 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-5585
CWE-78 Medium
No
No
4 2024-6-10 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 8 more
#VU91107 - Improper input validation
CVE-2024-5458
CWE-20 Medium
No
No
4 2024-6-10 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 18 more
#VU88482 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-1874
CWE-78 Medium
Available
No
4 2024-6-10 11.04.2024 SB2024041173
SB2024041175
SB2024041176
and 7 more
#VU88462 - Command injection
CVE-2024-27980
CWE-77 Medium
No
No
4 2024-7-10 11.04.2024 SB2024041122
SB2024041155
SB2024041156
and 20 more
#VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-27982
CWE-444 Medium
No
No
4 2024-4-8 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 53 more
#VU88175 - Reachable Assertion
CVE-2024-27983
CWE-617 Medium
Available
No
4 2024-4-8 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 56 more
#VU88153 - Resource exhaustion
CVE-2024-27316
CWE-400 Medium
Available
No
4 2024-4-8 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795
CWE-113 Medium
No
No
4 2024-4-8 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 38 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709
CWE-113 Medium
No
No
4 2024-4-8 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 62 more
#VU88144 - Improper input validation
CVE-2024-28182
CWE-20 Medium
No
No
4 2024-4-8 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU86718 - Improper Handling of Exceptional Conditions
CVE-2024-21892
CWE-755 Low
No
No
4 2024-2-21 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 30 more
#VU4201 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2012-1823
CWE-78 Critical
Available
Exploited
4 2024-6-10 11.01.2017 SB2012050301
SB2015050401
SB2012050901
and 11 more


Showing elements 101 - 120 out of 235