Known vulnerabilities in jbcs-httpd24-mod_md (Red Hat package) - page 6
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-mod_md (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-mod_md_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
128
Public exploits:
14
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.4.28-16.el7jbcs
2.4.28-16.el8jbcs
2.4.28-13.el7jbcs
2.4.28-13.el8jbcs
2.4.28-10.el7jbcs
2.4.28-10.el8jbcs
2.4.24-13.el7jbcs
2.4.24-13.el8jbcs
2.4.24-11.el7jbcs
2.4.24-11.el8jbcs
2.4.24-6.el7jbcs
2.4.24-6.el8jbcs
2.4.24-4.el7jbcs
2.4.24-4.el8jbcs
2.4.24-2.el7jbcs
2.4.24-2.el8jbcs
2.4.0-27.el7jbcs
2.4.0-27.el8jbcs
2.4.0-25.el7jbcs
2.4.0-25.el8jbcs
2.4.0-20.el7jbcs
2.4.0-20.el8jbcs
2.0.8-30.jbcs.el6
2.0.8-30.jbcs.el7
2.4.0-18.el7jbcs
2.4.0-18.el8jbcs
2.4.0-15.el7jbcs
2.4.0-15.el8jbcs
2.0.8-41.jbcs.el7
2.0.8-41.el8jbcs
2.0.8-40.jbcs.el7
2.0.8-40.el8jbcs
2.0.8-38.jbcs.el7
2.0.8-38.el8jbcs
2.0.8-36.jbcs.el7
2.0.8-36.el8jbcs
2.0.8-33.jbcs.el7
2.0.8-31.jbcs.el7
2.0.8-24.jbcs.el6
2.0.8-24.jbcs.el7
Vulnerabilities (128)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU56678 - Server-Side Request Forgery (SSRF) CVE-2021-40438 |
CWE-918 | High | 2.0.8-38.el8jbcs, 2.0.8-38.jbcs.el7 | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 42 more |
||
| #VU56064 - Out-of-bounds read CVE-2021-3712 |
CWE-125 | Medium | 2.0.8-40.el8jbcs, 2.0.8-40.jbcs.el7 | 24.08.2021 |
SB2021082414 SB2021082508 SB2021082510 and 142 more |
||
| #VU53780 - Permissions, Privileges, and Access Controls CVE-2019-17567 |
CWE-264 | Medium | 2.0.8-40.el8jbcs, 2.0.8-40.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 10 more |
||
| #VU53778 - NULL Pointer Dereference CVE-2020-13950 |
CWE-476 | Medium | 2.0.8-40.el8jbcs, 2.0.8-40.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 15 more |
||
| #VU53777 - NULL Pointer Dereference CVE-2021-26690 |
CWE-476 | Medium | 2.0.8-40.el8jbcs, 2.0.8-40.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 17 more |
||
| #VU53775 - Stack-based buffer overflow CVE-2020-35452 |
CWE-121 | Medium | 2.0.8-40.el8jbcs, 2.0.8-40.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 19 more |
||
| #VU53774 - Improper input validation CVE-2021-30641 |
CWE-20 | Medium | 2.0.8-40.el8jbcs, 2.0.8-40.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 20 more |
||
| #VU53773 - NULL Pointer Dereference CVE-2021-31618 |
CWE-476 | Medium | 2.0.8-36.el8jbcs, 2.0.8-36.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 12 more |
||
| #VU53589 - Use After Free CVE-2021-22901 |
CWE-416 | High | 2.0.8-36.el8jbcs, 2.0.8-36.jbcs.el7 | 26.05.2021 |
SB2021052620 SB2021052711 SB2021052719 and 18 more |
||
| #VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2021-22890 |
CWE-300 | Medium | 2.0.8-36.el8jbcs, 2.0.8-36.jbcs.el7 | 31.03.2021 |
SB2021033111 SB2021040104 SB2021040117 and 15 more |
||
| #VU51821 - Exposure of sensitive information to an unauthorized actor CVE-2021-22876 |
CWE-200 | Medium | 2.0.8-36.el8jbcs, 2.0.8-36.jbcs.el7 | 31.03.2021 |
SB2021033111 SB2021040104 SB2021040117 and 31 more |
||
| #VU51733 - NULL Pointer Dereference CVE-2021-3449 |
CWE-476 | Medium | 2.0.8-33.jbcs.el7 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 56 more |
||
| #VU51732 - Security Features CVE-2021-3450 |
CWE-254 | Medium | 2.0.8-33.jbcs.el7 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 50 more |
||
| #VU50740 - NULL Pointer Dereference CVE-2021-23841 |
CWE-476 | Medium | 2.0.8-40.el8jbcs, 2.0.8-40.jbcs.el7 | 17.02.2021 |
SB2021021702 SB2021021817 SB2021022420 and 66 more |
||
| #VU48895 - Improper Check for Certificate Revocation CVE-2020-8286 |
CWE-299 | Medium | 2.0.8-36.el8jbcs, 2.0.8-36.jbcs.el7 | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120929 and 30 more |
||
| #VU48894 - Uncontrolled Recursion CVE-2020-8285 |
CWE-674 | Low | 2.0.8-36.el8jbcs, 2.0.8-36.jbcs.el7 | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120928 and 37 more |
||
| #VU48893 - Exposure of sensitive information to an unauthorized actor CVE-2020-8284 |
CWE-200 | Medium | 2.0.8-36.el8jbcs, 2.0.8-36.jbcs.el7 | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120927 and 31 more |
||
| #VU48896 - NULL Pointer Dereference CVE-2020-1971 |
CWE-476 | Medium | 2.0.8-31.jbcs.el7 | 08.12.2020 |
SB2020120852 SB2020120903 SB2020120905 and 91 more |
||
| #VU29292 - Exposure of sensitive information to an unauthorized actor CVE-2020-8169 |
CWE-200 | Medium | 2.0.8-36.el8jbcs, 2.0.8-36.jbcs.el7 | 25.06.2020 |
SB2020062513 SB2020062514 SB2020063017 and 14 more |
||
| #VU18923 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2018-20843 |
CWE-611 | Medium | 2.0.8-24.jbcs.el6, 2.0.8-24.jbcs.el7 | 27.06.2019 |
SB2019062808 SB2019070104 SB2019072102 and 30 more |
Showing elements 101 - 120 out of 128