Known vulnerabilities in jbcs-httpd24-curl (Red Hat package) - page 6

Vendor: Red Hat Inc.
Software: jbcs-httpd24-curl (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:jbcs-httpd24-curl_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 117
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting jbcs-httpd24-curl (Red Hat package) jbcs-httpd24-curl (Red Hat package) is affected by 117 known vulnerabilities: 26 high, 77 medium, 14 low Critical High Medium Low

Vulnerabilities (117)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53773 - NULL Pointer Dereference
CVE-2021-31618		 CWE-476 Medium
No
No
 7.77.0-2.el8jbcs, 7.77.0-2.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 12 more
#VU53589 - Use After Free
CVE-2021-22901		 CWE-416 High
No
No
 7.77.0-2.el8jbcs, 7.77.0-2.jbcs.el7 26.05.2021 SB2021052620
SB2021052711
SB2021052719
and 18 more
#VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-22890		 CWE-300 Medium
No
No
 7.77.0-2.el8jbcs, 7.77.0-2.jbcs.el7 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 15 more
#VU51821 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22876		 CWE-200 Medium
No
No
 7.77.0-2.el8jbcs, 7.77.0-2.jbcs.el7 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 31 more
#VU48895 - Improper Check for Certificate Revocation
CVE-2020-8286		 CWE-299 Medium
No
No
 7.77.0-2.el8jbcs, 7.77.0-2.jbcs.el7 09.12.2020 SB2020120902
SB2020120915
SB2020120929
and 30 more
#VU48894 - Uncontrolled Recursion
CVE-2020-8285		 CWE-674 Low
No
No
 7.77.0-2.el8jbcs, 7.77.0-2.jbcs.el7 09.12.2020 SB2020120902
SB2020120915
SB2020120928
and 37 more
#VU48893 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8284		 CWE-200 Medium
No
No
 7.77.0-2.el8jbcs, 7.77.0-2.jbcs.el7 09.12.2020 SB2020120902
SB2020120915
SB2020120927
and 31 more
#VU29292 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8169		 CWE-200 Medium
No
No
 7.77.0-2.el8jbcs, 7.77.0-2.jbcs.el7 25.06.2020 SB2020062513
SB2020062514
SB2020063017
and 14 more
#VU28538 - Resource exhaustion
CVE-2020-11080		 CWE-400 Medium
No
No
 7.64.1-36.jbcs.el6, 7.64.1-36.jbcs.el7 03.06.2020 SB2020060305
SB2020060607
SB2020060703
and 42 more
#VU26528 - Use of Uninitialized Variable
CVE-2020-1934		 CWE-457 Medium
No
No
 7.64.1-36.jbcs.el6, 7.64.1-36.jbcs.el7 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 20 more
#VU24489 - Missing release of memory after effective lifetime
CVE-2019-19956		 CWE-401 Medium
No
No
 7.64.1-36.jbcs.el6, 7.64.1-36.jbcs.el7 22.01.2020 SB2019122405
SB2020021011
SB2020052301
and 24 more
#VU24488 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-7595		 CWE-835 Medium
No
No
 7.64.1-36.jbcs.el6, 7.64.1-36.jbcs.el7 22.01.2020 SB2020012220
SB2020021011
SB2020052301
and 30 more
#VU24487 - Missing release of memory after effective lifetime
CVE-2019-20388		 CWE-401 Medium
No
No
 7.64.1-36.jbcs.el6, 7.64.1-36.jbcs.el7 22.01.2020 SB2020012220
SB2020052301
SB2020062607
and 28 more
#VU21091 - Out-of-bounds read
CVE-2019-15903		 CWE-125 Medium
Available
No
 7.64.1-36.jbcs.el6, 7.64.1-36.jbcs.el7 12.09.2019 SB2019091209
SB2019091210
SB2019091701
and 61 more
#VU18923 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-20843		 CWE-611 Medium
Available
No
 7.64.1-36.jbcs.el6, 7.64.1-36.jbcs.el7 27.06.2019 SB2019062808
SB2019070104
SB2019072102
and 30 more
#VU18109 - Use After Free
CVE-2019-0196		 CWE-416 Medium
No
No
 7.64.1-36.jbcs.el6, 7.64.1-36.jbcs.el7 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU18108 - Resource Management Errors
CVE-2019-0197		 CWE-399 Medium
No
No
 7.64.1-36.jbcs.el6, 7.64.1-36.jbcs.el7 02.04.2019 SB2019040201
SB2019041607
SB2019041106
and 13 more


Showing elements 101 - 120 out of 117