Known vulnerabilities in jbcs-httpd24-mod_security (Red Hat package) - page 6

Vendor: Red Hat Inc.
Software: jbcs-httpd24-mod_security (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:jbcs-httpd24-mod_security_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 128
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting jbcs-httpd24-mod_security (Red Hat package) jbcs-httpd24-mod_security (Red Hat package) is affected by 128 known vulnerabilities: 1 critical, 28 high, 85 medium, 14 low Critical High Medium Low

Vulnerabilities (128)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Available
Exploited
 2.9.2-65.GA.el8jbcs, 2.9.2-65.GA.jbcs.el7 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU56064 - Out-of-bounds read
CVE-2021-3712		 CWE-125 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more
#VU53780 - Permissions, Privileges, and Access Controls
CVE-2019-17567		 CWE-264 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 10 more
#VU53778 - NULL Pointer Dereference
CVE-2020-13950		 CWE-476 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 15 more
#VU53777 - NULL Pointer Dereference
CVE-2021-26690		 CWE-476 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 17 more
#VU53775 - Stack-based buffer overflow
CVE-2020-35452		 CWE-121 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 19 more
#VU53774 - Improper input validation
CVE-2021-30641		 CWE-20 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 20 more
#VU53773 - NULL Pointer Dereference
CVE-2021-31618		 CWE-476 Medium
No
No
 2.9.2-63.GA.el8jbcs, 2.9.2-63.GA.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 12 more
#VU53589 - Use After Free
CVE-2021-22901		 CWE-416 High
No
No
 2.9.2-63.GA.el8jbcs, 2.9.2-63.GA.jbcs.el7 26.05.2021 SB2021052620
SB2021052711
SB2021052719
and 18 more
#VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-22890		 CWE-300 Medium
No
No
 2.9.2-63.GA.el8jbcs, 2.9.2-63.GA.jbcs.el7 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 15 more
#VU51821 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22876		 CWE-200 Medium
No
No
 2.9.2-63.GA.el8jbcs, 2.9.2-63.GA.jbcs.el7 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 31 more
#VU51733 - NULL Pointer Dereference
CVE-2021-3449		 CWE-476 Medium
Available
No
 2.9.2-60.GA.jbcs.el7 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51732 - Security Features
CVE-2021-3450		 CWE-254 Medium
No
No
 2.9.2-60.GA.jbcs.el7 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841		 CWE-476 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more
#VU48895 - Improper Check for Certificate Revocation
CVE-2020-8286		 CWE-299 Medium
No
No
 2.9.2-63.GA.el8jbcs, 2.9.2-63.GA.jbcs.el7 09.12.2020 SB2020120902
SB2020120915
SB2020120929
and 30 more
#VU48894 - Uncontrolled Recursion
CVE-2020-8285		 CWE-674 Low
No
No
 2.9.2-63.GA.el8jbcs, 2.9.2-63.GA.jbcs.el7 09.12.2020 SB2020120902
SB2020120915
SB2020120928
and 37 more
#VU48893 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8284		 CWE-200 Medium
No
No
 2.9.2-63.GA.el8jbcs, 2.9.2-63.GA.jbcs.el7 09.12.2020 SB2020120902
SB2020120915
SB2020120927
and 31 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 2.9.2-58.GA.jbcs.el7 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU29292 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8169		 CWE-200 Medium
No
No
 2.9.2-63.GA.el8jbcs, 2.9.2-63.GA.jbcs.el7 25.06.2020 SB2020062513
SB2020062514
SB2020063017
and 14 more
#VU18923 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-20843		 CWE-611 Medium
Available
No
 2.9.2-51.GA.jbcs.el6, 2.9.2-51.GA.jbcs.el7 27.06.2019 SB2019062808
SB2019070104
SB2019072102
and 30 more


Showing elements 101 - 120 out of 128