NG
Product
NGINX
On CISA KEVExploited in the wild
41
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 13Medium 6Low 0
Watch
Add NGINX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44487 In wildKEV | 7.5 | Oct 10 | HTTP/2 Rapid Reset Attack Vulnerability Affected: 1.9.5 through 1.25.2 |
| CVE-2017-20005 | 9.8 | Jun 6 | NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false… Affected: before 1.13.6 |
| CVE-2016-0746 | 9.8 | Feb 15 | Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or… Affected: 0.6.18 through 1.8.0; 1.9.0 before 1.9.10 |
| CVE-2009-3555 | 9.8 | Nov 9 | The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and… Affected: 0.1.0 through 0.8.22 |
| CVE-2022-41741 | 7.8 | Oct 19 | NGINX ngx_http_mp4_module vulnerability CVE-2022-41741 Affected: Mainline before 1.23.2; Stable before 1.22.1 |
| CVE-2016-1247 | 7.8 | Nov 29 | The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and… Affected: through 1.10.1; through 1.10.0; through 1.6.2; through 1.4.3 |
| CVE-2021-23017 | 7.7 | Jun 1 | A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting… Affected: 0.6.18 before 1.20.1 |
| CVE-2019-9513 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service Affected: 1.9.5 before 1.16.1; 1.17.0 through 1.17.2 |
| CVE-2019-9511 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service Affected: 1.9.5 before 1.16.1; 1.17.0 through 1.17.2 |
| CVE-2018-16844 | 7.5 | Nov 7 | nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage Affected: 1.9.5 before 1.14.1; 1.15.0 before 1.15.6 |
| CVE-2018-16843 | 7.5 | Nov 7 | nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption Affected: after 1.9.5 before 1.14.1; after 1.15.0 before 1.15.6 |
| CVE-2017-7529 | 7.5 | Jul 13 | Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive… Affected: 0.5.6 through 1.12.1; 1.13.0 through 1.13.2 |
| CVE-2016-4450 | 7.5 | Jun 7 | os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a… Affected: 1.3.9 before 1.10.1; 1.11.0 |
| CVE-2016-0742 | 7.5 | Feb 15 | The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a… Affected: 0.6.18 before 1.8.1; 1.9.0 before 1.9.10 |
| CVE-2021-3618 | 7.4 | Mar 23 | ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain… Affected: before 1.21.0 |
| CVE-2022-41742 | 7.1 | Oct 19 | NGINX ngx_http_mp4_module vulnerability CVE-2022-41742 Affected: Mainline before 1.23.2; Stable before 1.22.1 |
| CVE-2019-9516 | 6.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service Affected: 1.9.5 before 1.16.1; 1.17.0 through 1.17.2 |
| CVE-2018-16845 | 6.1 | Nov 7 | nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker… Affected: 1.0.7 through 1.0.15; 1.1.3 through 1.15.5 |
| CVE-2019-20372 | 5.3 | Jan 9 | NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in… Affected: before 1.17.7 |
| CVE-2016-0747 | 5.3 | Feb 15 | The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process… Affected: 0.6.18 before 1.8.1; 1.9.0 before 1.9.10 |
| CVE-2011-4968 | 4.8 | Nov 19 | nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM) Affected: 0.7.61; 0.7.62; 0.7.64; 0.7.65; 0.7.66; 0.8.33; +4 more |
| CVE-2025-23419 | 4.3 | Feb 5 | When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements… Affected: 1.11.4 before 1.26.3; 1.27.0 before 1.27.4 |
| CVE-2014-3556 | – | Dec 29 | The STARTTLS implementation in mail/ngx_mail_smtp_handler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4 does not properly restrict I/O… Affected: 1.5.6 before 1.6.1; 1.7.0 before 1.7.4 |
| CVE-2014-3616 | – | Dec 8 | nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context,… Affected: 0.5.6 before 1.6.2; 1.7.0 before 1.7.5 |
| CVE-2014-0088 | – | Apr 29 | The SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11, when running on a 32-bit platform, allows remote attackers to execute arbitrary code via… Affected: 1.5.10 |
| CVE-2014-0133 | – | Mar 28 | Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execute arbitrary code via a crafted request Affected: 1.3.15 before 1.4.7; 1.5.0 through 1.5.11 |
| CVE-2013-4547 | – | Nov 23 | nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI Affected: 0.8.41 before 1.4.4; 1.5.0 through 1.5.6 |
| CVE-2013-0337 | – | Oct 27 | The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain… Affected: through 1.3.13; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +34 more |
| CVE-2013-2070 | – | Jul 20 | http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a… Affected: 1.1.4 through 1.2.8; 1.3.9 through 1.4.0 |
| CVE-2013-2028 | – | Jul 20 | The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code… Affected: 1.3.9 through 1.4.0 |
| CVE-2011-4963 | – | Jul 26 | nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing Affected: 0.7.52 before 1.2.1; 1.3.0 |
| CVE-2012-2089 | – | Apr 17 | Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote… Affected: 1.0.7 through 1.0.14; 1.1.3 through 1.1.18 |
| CVE-2012-1180 | – | Apr 17 | Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend… Affected: 0.1.0 before 1.0.14; 1.1.0 before 1.1.17 |
| CVE-2011-4315 | – | Dec 8 | Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or… Affected: 0.6.18 before 1.0.10; 1.1.0 through 1.1.7 |
| CVE-2010-4180 | – | Dec 6 | OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session… Affected: before 0.9.2 |
| CVE-2010-2266 | – | Jun 15 | nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using… Affected: 0.7.52 before 0.7.67; 0.8.0 through 0.8.40 |
| CVE-2010-2263 | – | Jun 15 | nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document… Affected: 0.7.52 before 0.7.66; 0.8.0 through 0.8.39 |
| CVE-2009-4487 | – | Jan 13 | nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary… Affected: 0.7.64 |
| CVE-2009-3898 | – | Nov 24 | Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to… Affected: through 0.7.62; 0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; +34 more |
| CVE-2009-3896 | – | Nov 24 | src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote… Affected: 0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; 0.1.5; +34 more |
| CVE-2009-2629 | – | Sep 15 | Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute… Affected: 0.1.0 before 0.5.38; 0.6.0 before 0.6.39; 0.7.0 before 0.7.62; 0.8.0 before 0.8.15 |
Showing 41