Known vulnerabilities in jbcs-httpd24-httpd (Red Hat package) - page 6
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-httpd (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-httpd_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
136
Public exploits:
15
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.4.62-13.el7jbcs
2.4.62-13.el8jbcs
2.4.62-11.el7jbcs
2.4.62-11.el8jbcs
2.4.62-8.el7jbcs
2.4.62-8.el8jbcs
2.4.57-15.el7jbcs
2.4.57-15.el8jbcs
2.4.57-13.el7jbcs
2.4.57-13.el8jbcs
2.4.57-10.el7jbcs
2.4.57-10.el8jbcs
2.4.57-9.el7jbcs
2.4.57-9.el8jbcs
2.4.57-7.el7jbcs
2.4.57-7.el8jbcs
2.4.57-6.el7jbcs
2.4.57-6.el8jbcs
2.4.57-5.el7jbcs
2.4.57-5.el8jbcs
2.4.51-39.el7jbcs
2.4.51-39.el8jbcs
2.4.37-64.jbcs.el6
2.4.37-64.jbcs.el7
2.4.51-37.el7jbcs
2.4.51-37.el8jbcs
2.4.51-28.el7jbcs
2.4.51-28.el8jbcs
2.4.37-80.jbcs.el7
2.4.37-80.el8jbcs
2.4.37-78.jbcs.el7
2.4.37-78.el8jbcs
2.4.37-76.jbcs.el7
2.4.37-76.el8jbcs
2.4.37-74.jbcs.el7
2.4.37-74.el8jbcs
2.4.37-70.jbcs.el7
2.4.37-66.jbcs.el7
2.4.37-57.jbcs.el6
2.4.37-57.jbcs.el7
2.4.37-52.jbcs.el6
2.4.37-52.jbcs.el7
2.4.37-41.jbcs.el6
2.4.37-41.jbcs.el7
2.4.37-33.jbcs.el6
2.4.37-33.jbcs.el7
2.4.29-41.jbcs.el6
2.4.29-41.jbcs.el7
2.4.29-40.jbcs.el6
2.4.29-40.jbcs.el7
2.4.29-35.jbcs.el6
2.4.29-35.jbcs.el7
2.4.29-17.jbcs.el7
2.4.29-17.jbcs.el6
2.4.23-125.jbcs.el7
2.4.23-125.jbcs.el6
2.4.23-122.jbcs.el7
2.4.23-122.jbcs.el6
2.4.23-120.jbcs.el7
2.4.23-120.jbcs.el6
2.4.6-77.SP1.jbcs.el6
2.4.6-77.SP1.jbcs.el7
2.4.23-102.jbcs.el6
2.4.23-102.jbcs.el7
Vulnerabilities (136)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU56678 - Server-Side Request Forgery (SSRF) CVE-2021-40438 |
CWE-918 | High | 2.4.37-76.el8jbcs, 2.4.37-76.jbcs.el7 | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 42 more |
||
| #VU56064 - Out-of-bounds read CVE-2021-3712 |
CWE-125 | Medium | 2.4.37-78.el8jbcs, 2.4.37-78.jbcs.el7 | 24.08.2021 |
SB2021082414 SB2021082508 SB2021082510 and 142 more |
||
| #VU53780 - Permissions, Privileges, and Access Controls CVE-2019-17567 |
CWE-264 | Medium | 2.4.37-78.el8jbcs, 2.4.37-78.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 10 more |
||
| #VU53778 - NULL Pointer Dereference CVE-2020-13950 |
CWE-476 | Medium | 2.4.37-78.el8jbcs, 2.4.37-78.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 15 more |
||
| #VU53777 - NULL Pointer Dereference CVE-2021-26690 |
CWE-476 | Medium | 2.4.37-78.el8jbcs, 2.4.37-78.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 17 more |
||
| #VU53775 - Stack-based buffer overflow CVE-2020-35452 |
CWE-121 | Medium | 2.4.37-78.el8jbcs, 2.4.37-78.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 19 more |
||
| #VU53774 - Improper input validation CVE-2021-30641 |
CWE-20 | Medium | 2.4.37-78.el8jbcs, 2.4.37-78.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 20 more |
||
| #VU53773 - NULL Pointer Dereference CVE-2021-31618 |
CWE-476 | Medium | 2.4.37-74.el8jbcs, 2.4.37-74.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 12 more |
||
| #VU53589 - Use After Free CVE-2021-22901 |
CWE-416 | High | 2.4.37-74.el8jbcs, 2.4.37-74.jbcs.el7 | 26.05.2021 |
SB2021052620 SB2021052711 SB2021052719 and 18 more |
||
| #VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2021-22890 |
CWE-300 | Medium | 2.4.37-74.el8jbcs, 2.4.37-74.jbcs.el7 | 31.03.2021 |
SB2021033111 SB2021040104 SB2021040117 and 15 more |
||
| #VU51821 - Exposure of sensitive information to an unauthorized actor CVE-2021-22876 |
CWE-200 | Medium | 2.4.37-74.el8jbcs, 2.4.37-74.jbcs.el7 | 31.03.2021 |
SB2021033111 SB2021040104 SB2021040117 and 31 more |
||
| #VU51733 - NULL Pointer Dereference CVE-2021-3449 |
CWE-476 | Medium | 2.4.37-70.jbcs.el7 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 56 more |
||
| #VU51732 - Security Features CVE-2021-3450 |
CWE-254 | Medium | 2.4.37-70.jbcs.el7 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 50 more |
||
| #VU50740 - NULL Pointer Dereference CVE-2021-23841 |
CWE-476 | Medium | 2.4.37-78.el8jbcs, 2.4.37-78.jbcs.el7 | 17.02.2021 |
SB2021021702 SB2021021817 SB2021022420 and 66 more |
||
| #VU48895 - Improper Check for Certificate Revocation CVE-2020-8286 |
CWE-299 | Medium | 2.4.37-74.el8jbcs, 2.4.37-74.jbcs.el7 | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120929 and 30 more |
||
| #VU48894 - Uncontrolled Recursion CVE-2020-8285 |
CWE-674 | Low | 2.4.37-74.el8jbcs, 2.4.37-74.jbcs.el7 | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120928 and 37 more |
||
| #VU48893 - Exposure of sensitive information to an unauthorized actor CVE-2020-8284 |
CWE-200 | Medium | 2.4.37-74.el8jbcs, 2.4.37-74.jbcs.el7 | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120927 and 31 more |
||
| #VU48896 - NULL Pointer Dereference CVE-2020-1971 |
CWE-476 | Medium | 2.4.37-66.jbcs.el7 | 08.12.2020 |
SB2020120852 SB2020120903 SB2020120905 and 91 more |
||
| #VU29292 - Exposure of sensitive information to an unauthorized actor CVE-2020-8169 |
CWE-200 | Medium | 2.4.37-74.el8jbcs, 2.4.37-74.jbcs.el7 | 25.06.2020 |
SB2020062513 SB2020062514 SB2020063017 and 14 more |
||
| #VU18923 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2018-20843 |
CWE-611 | Medium | 2.4.37-57.jbcs.el6, 2.4.37-57.jbcs.el7 | 27.06.2019 |
SB2019062808 SB2019070104 SB2019072102 and 30 more |
Showing elements 101 - 120 out of 136