Known vulnerabilities in www-servers/apache - page 4

Vendor: Gentoo
Software: www-servers/apache
Software CPE: cpe:2.3:o:gentoo:www-servers_apache:*:*:*:*:*:gentoo_linux:*:*
Website:
Total vulnerabilities: 81
Public exploits: 18
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting www-servers/apache www-servers/apache is affected by 81 known vulnerabilities: 4 critical, 14 high, 50 medium, 13 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64088 - Out-of-bounds read
CVE-2022-30556		 CWE-125 Medium
No
No
 2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 31 more
#VU64086 - Resource exhaustion
CVE-2022-30522		 CWE-400 Medium
No
No
 2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022061723
and 31 more
#VU64085 - Improper input validation
CVE-2022-29404		 CWE-20 Medium
No
No
 2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 30 more
#VU64083 - Out-of-bounds read
CVE-2022-28615		 CWE-125 Low
No
No
 2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64081 - Out-of-bounds read
CVE-2022-28614		 CWE-125 Low
No
No
 2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 36 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Available
No
 2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU61287 - Improper input validation
CVE-2022-22719		 CWE-20 Medium
No
No
 2.4.54 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 32 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 2.4.54 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61285 - Integer overflow
CVE-2022-22721		 CWE-190 High
No
No
 2.4.54 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU61284 - Out-of-bounds write
CVE-2022-23943		 CWE-787 High
No
No
 2.4.54 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more
#VU59057 - Server-Side Request Forgery (SSRF)
CVE-2021-44224		 CWE-918 Medium
No
No
 2.4.54 20.12.2021 SB2021122005
SB2021122021
SB2021122709
and 33 more
#VU59056 - Memory corruption
CVE-2021-44790		 CWE-119 Critical
Available
No
 2.4.54 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU57127 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-42013		 CWE-78 Critical
Available
Exploited
 2.4.54 07.10.2021 SB2021100718
SB2021100802
SB2021101513
and 8 more
#VU57063 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-41773		 CWE-22 Critical
Available
Exploited
 2.4.54 05.10.2021 SB2021100514
SB2021100601
SB2021100802
and 8 more
#VU57062 - NULL Pointer Dereference
CVE-2021-41524		 CWE-476 Medium
No
No
 2.4.54 05.10.2021 SB2021100514
SB2021100601
SB2021101513
and 5 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 2.4.54 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56680 - Out-of-bounds read
CVE-2021-36160		 CWE-125 Medium
No
No
 2.4.54 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 22 more
#VU56679 - Memory corruption
CVE-2021-39275		 CWE-119 Medium
No
No
 2.4.54 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Available
Exploited
 2.4.54 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33193		 CWE-444 Medium
No
No
 2.4.54 13.09.2021 SB2021091317
SB2021091707
SB2021092301
and 24 more


Showing elements 61 - 80 out of 81