Known vulnerabilities in www-servers/apache - page 3

Vendor: Gentoo
Software: www-servers/apache
Software CPE: cpe:2.3:o:gentoo:www-servers_apache:*:*:*:*:*:gentoo_linux:*:*
Website:
Total vulnerabilities: 81
Public exploits: 18
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting www-servers/apache www-servers/apache is affected by 81 known vulnerabilities: 4 critical, 14 high, 50 medium, 13 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129546 - NULL Pointer Dereference
CVE-2026-29169		 CWE-476 Medium
No
No
 2.4.68 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 14 more
#VU94504 - Exposure of sensitive information to an unauthorized actor
CVE-2024-40725		 CWE-200 Medium
Available
No
 2.4.62 17.07.2024 SB20240717136
SB2024071854
SB2024071896
and 22 more
#VU94503 - Server-Side Request Forgery (SSRF)
CVE-2024-40898		 CWE-918 High
Available
No
 2.4.62 17.07.2024 SB20240717136
SB2024071896
SB2024081362
and 13 more
#VU93729 - Exposure of sensitive information to an unauthorized actor
CVE-2024-39884		 CWE-200 Medium
No
No
 2.4.62 03.07.2024 SB2024070342
SB2024070401
SB2024070890
and 21 more
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573		 CWE-918 Medium
No
No
 2.4.62 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93544 - Improper input validation
CVE-2024-38477		 CWE-20 Medium
No
No
 2.4.62 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476		 CWE-918 High
No
No
 2.4.62 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93542 - Improper input validation
CVE-2024-38475		 CWE-20 Critical
Available
No
 2.4.62 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93541 - Improper input validation
CVE-2024-38474		 CWE-20 Medium
No
No
 2.4.62 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 57 more
#VU93540 - Improper input validation
CVE-2024-38473		 CWE-20 Medium
Available
No
 2.4.62 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU93539 - Server-Side Request Forgery (SSRF)
CVE-2024-38472		 CWE-918 Medium
Available
No
 2.4.62 01.07.2024 SB2024070155
SB20240702144
SB2024081362
and 11 more
#VU93538 - NULL Pointer Dereference
CVE-2024-36387		 CWE-476 Medium
No
No
 2.4.62 01.07.2024 SB2024070155
SB20240702144
SB2024070890
and 18 more
#VU88153 - Resource exhaustion
CVE-2024-27316		 CWE-400 Medium
Available
No
 2.4.62 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795		 CWE-113 Medium
No
No
 2.4.62 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 38 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709		 CWE-113 Medium
No
No
 2.4.62 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 62 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Available
No
 2.4.56 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-27522		 CWE-113 Medium
No
No
 2.4.56 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 33 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436		 CWE-113 Medium
No
No
 2.4.56 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760		 CWE-444 Medium
No
No
 2.4.56 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71241 - Memory corruption
CVE-2006-20001		 CWE-119 Medium
No
No
 2.4.56 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more


Showing elements 41 - 60 out of 81