NG
Product
NGINX
On CISA KEVExploited in the wild
41
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 13Medium 6Low 0
Watch
Add NGINX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-20005 | 9.8 | Jun 6 | NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false… Affected: before 1.13.6 |
| CVE-2016-0746 | 9.8 | Feb 15 | Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or… Affected: 0.6.18 through 1.8.0; 1.9.0 before 1.9.10 |
| CVE-2009-3555 | 9.8 | Nov 9 | The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and… Affected: 0.1.0 through 0.8.22 |
Showing 3