Known vulnerabilities in EasyApache - page 9

Software: EasyApache
Software CPE: cpe:2.3:a:cpanel:easyapache:*:*:*:*:*:*:*:*
Total vulnerabilities: 235
Public exploits: 35
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EasyApache EasyApache is affected by 235 known vulnerabilities: 4 critical, 22 high, 159 medium, 50 low Critical High Medium Low

Vulnerabilities (235)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78978 - Memory corruption
CVE-2023-3824
CWE-119 Critical
Available
Exploited
4 2023-8-9, 4 2023-8-23 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 32 more
#VU78977 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-3823
CWE-611 High
No
No
4 2023-8-9, 4 2023-8-23 06.08.2023 SB2023080604
SB2023081704
SB20230821142
and 31 more
#VU78540 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-32001
CWE-367 Low
No
No
4 2023-7-27 21.07.2023 SB2023072135
SB2023072137
SB2023072138
and 17 more
#VU78463 - Resource Management Errors
CVE-2023-3446
CWE-399 Medium
No
No
4 2023-8-9 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256
CWE-444 Medium
No
No
4 2022-9-29 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU67849 - Use of Insufficiently Random Values
CVE-2022-35255
CWE-330 Medium
No
No
4 2022-9-29 03.10.2022 SB2022100401
SB2022100402
SB2022100528
and 40 more
#VU66881 - Improper input validation
CVE-2022-35252
CWE-20 Medium
No
No
4 2022-9-7 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more
#VU65292 - Heap-based Buffer Overflow
CVE-2022-31627
CWE-122 High
No
No
4 2022-7-13 14.07.2022 SB2022071404
SB2022071405
SB2022072549
and 5 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213
CWE-444 Medium
No
No
4 2022-9-29 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU65273 - Improper Check or Handling of Exceptional Conditions
CVE-2022-32212
CWE-703 Medium
No
No
4 2022-9-29 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 48 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097
CWE-311 Low
No
No
4 2022-7-6 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208
CWE-347 Medium
No
No
4 2022-6-29 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64684 - Incorrect Default Permissions
CVE-2022-32207
CWE-276 Low
No
No
4 2022-6-29 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 35 more
#VU64682 - Resource exhaustion
CVE-2022-32206
CWE-400 Medium
No
No
4 2022-6-29 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64681 - Resource exhaustion
CVE-2022-32205
CWE-400 Medium
No
No
4 2022-6-29 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 32 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068
CWE-78 Medium
No
No
4 2022-6-22 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU62768 - Uncontrolled Memory Allocation
CVE-2022-1473
CWE-789 Low
No
No
4 2022-5-11 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 18 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Available
No
4 2022-5-11 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Available
No
4 2022-3-17, 4 2022-3-23, 4 2022-5-11 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61284 - Out-of-bounds write
CVE-2022-23943
CWE-787 High
No
No
4 2022-3-16 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more


Showing elements 161 - 180 out of 235