nginx

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

nginx records in CISA KEV

No nginx vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Njs · all components

TI-2021-21251 CVE-2021-46461 · GHSA-8g5q-f4mq-w57g

MEDIUM 48

njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03147 Published 2022-02-14 No fix listed CWE-119

TI-2022-15882 CVE-2022-35173 · GHSA-f292-7gw4-3q3v

LOW 36

An issue was discovered in Nginx NJS v0.7.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01426 Published 2022-08-18 No fix listed CWE-754

TI-2022-12665 CVE-2022-30503 · GHSA-w2mq-mphr-8f87

LOW 25

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00291 Published 2022-05-27 No fix listed

TI-2022-12149 CVE-2022-29780 · GHSA-724w-6982-337c

LOW 25

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00391 Published 2022-05-27 No fix listed

TI-2022-12148 CVE-2022-29779 · GHSA-39cj-hgvp-8pvv

LOW 25

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00391 Published 2022-05-27 No fix listed