Skip to contentF5 Nginx vulnerabilities
- f5 nginx unitNGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the...CVE-2019-74019.8 Critical
- [unknown] nginx, apple xcode, canonical ubuntu linux +2 more +4 morenginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might...CVE-2018-16845Fix available8.2 High
- [unknown] nginx, apple xcode, canonical ubuntu linux +1 more +3 morenginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that...CVE-2018-16844Fix availableEPSS 12.7%5.3 Medium
- [unknown] nginx, apple xcode, canonical ubuntu linux +2 more +4 morenginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that...CVE-2018-16843Public exploitFix availableEPSS 48.0%5.3 Medium
- f5 nginx, apple xcode, puppet enterprise +2 moreNginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow...CVE-2017-7529Public exploitFix availableEPSS 62.6%7.5 High
- f5 nginx, fedoraproject fedora +1 moreThe nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6...CVE-2016-1247Public exploitFix available7.8 High
- f5 nginx, canonical ubuntu linux, debian linux +2 moreos/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to...CVE-2016-4450Fix availableEPSS 16.4%7.5 High
- f5 nginx, apple xcode, canonical ubuntu linux +2 more +4 moreThe resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME...CVE-2016-0747Fix available5.3 Medium
- f5 nginx, apple xcode, canonical ubuntu linux +2 more +4 moreUse-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9...CVE-2016-0746Fix available9.8 Critical
- f5 nginx, apple xcode, canonical ubuntu linux +3 more +5 moreThe resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a...CVE-2016-0742Fix availableEPSS 82.4%7.5 High
- f5 nginxThe STARTTLS implementation in mail/ngx_mail_smtp_handler.c in the SMTP proxy in nginx 1.5.x and...CVE-2014-3556Fix available6.8 Medium
- f5 nginx, debian linux +1 morenginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key...CVE-2014-3616Fix available4.3 Medium
- f5 nginxThe SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11, when...CVE-2014-00887.5 High
- f5 nginx, opensuse +1 moreHeap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x...CVE-2014-0133Fix available7.5 High
- f5 nginx, opensuse, suse lifecycle management server +2 more +4 morenginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended...CVE-2013-4547Public exploitFix availableEPSS 68.5%7.5 High
- f5 nginxThe default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions...CVE-2013-03377.5 High
- f5 nginx, fedoraproject fedora +1 moreThe ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows...CVE-2013-2028Public exploitEPSS 87.5%7.5 High
- f5 nginx, debian linux +1 morehttp/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when...CVE-2013-2070Fix availableEPSS 11.9%5.8 Medium
- f5 nginxnginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass...CVE-2011-49635.0 Medium
- f5 nginx, fedoraproject fedora +1 moreBuffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through...CVE-2012-2089Fix available6.8 Medium
- f5 nginx, debian linux, fedoraproject fedora +2 moreUse-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP...CVE-2012-1180Fix availableEPSS 10.6%5.0 Medium
- f5 nginx, fedoraproject fedora, suse studio +2 more +4 moreHeap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx...CVE-2011-4315Fix available6.8 Medium
- openssl, canonical ubuntu linux, debian linux +6 more +8 moreOpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is...CVE-2010-4180Fix available4.3 Medium
- f5 nginxnginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded...CVE-2010-2266Public exploitEPSS 21.5%5.0 Medium
- f5 nginxnginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers...CVE-2010-2263Public exploitEPSS 71.9%5.0 Medium
- f5 nginxnginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might...CVE-2009-4487Public exploitEPSS 26.8%6.8 Medium
- f5 nginxDirectory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine...CVE-2009-3898Public exploitFix availableEPSS 15.9%4.9 Medium
- apache http server, gnu gnutls, mozilla nss +5 more +7 moreApache Tomcat affected by vulnerability in TLS and SSL protocolCVE-2009-3555Public exploitFix availableEPSS 87.3%5.8 Medium
- f5 nginxsrc/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6...CVE-2009-3896Fix availableEPSS 10.2%5.0 Medium
- f5 nginx, debian linux, fedoraproject fedora +2 moreBuffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39,...CVE-2009-2629Public exploitFix availableEPSS 75.1%7.5 High