Vendors / nginx Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now nginx records in CISA KEV No nginx vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 68
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.62597 · Published 2017-07-13 · Partial fix CWE-190
Priority MEDIUM 48
njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03147 · Published 2022-02-14 · No fix listed CWE-119
Priority LOW 39
Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .…
CVSS 2.0 MEDIUM 4.9· Network · Low privileges · Interaction — · EPSS 0.15887 · Published 2009-11-24 · No fix listed CWE-22
Priority LOW 36
An issue was discovered in Nginx NJS v0.7.5.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01426 · Published 2022-08-18 · No fix listed CWE-754
Priority LOW 35
src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL po…
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10181 · Published 2009-11-24 · No fix listed CWE-119
Priority LOW 29
nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
CVSS 3.1 MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.03989 · Published 2019-11-19 · No fix listed CWE-20
Priority LOW 25
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00291 · Published 2022-05-27 · No fix listed
Priority LOW 25
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00391 · Published 2022-05-27 · No fix listed
Priority LOW 25
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00391 · Published 2022-05-27 · No fix listed
Open these records in search → All records by CVSS severity
1 2 6 0 0
THREATIST.IORead the docs