NG
Product
NGINX
On CISA KEVExploited in the wild
41
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 13Medium 6Low 0
Watch
Add NGINX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44487 In wildKEV | 7.5 | Oct 10 | HTTP/2 Rapid Reset Attack Vulnerability Affected: 1.9.5 through 1.25.2 |
| CVE-2022-41741 | 7.8 | Oct 19 | NGINX ngx_http_mp4_module vulnerability CVE-2022-41741 Affected: Mainline before 1.23.2; Stable before 1.22.1 |
| CVE-2016-1247 | 7.8 | Nov 29 | The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and… Affected: through 1.10.1; through 1.10.0; through 1.6.2; through 1.4.3 |
| CVE-2021-23017 | 7.7 | Jun 1 | A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting… Affected: 0.6.18 before 1.20.1 |
| CVE-2019-9513 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service Affected: 1.9.5 before 1.16.1; 1.17.0 through 1.17.2 |
| CVE-2019-9511 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service Affected: 1.9.5 before 1.16.1; 1.17.0 through 1.17.2 |
| CVE-2018-16844 | 7.5 | Nov 7 | nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage Affected: 1.9.5 before 1.14.1; 1.15.0 before 1.15.6 |
| CVE-2018-16843 | 7.5 | Nov 7 | nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption Affected: after 1.9.5 before 1.14.1; after 1.15.0 before 1.15.6 |
| CVE-2017-7529 | 7.5 | Jul 13 | Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive… Affected: 0.5.6 through 1.12.1; 1.13.0 through 1.13.2 |
| CVE-2016-4450 | 7.5 | Jun 7 | os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a… Affected: 1.3.9 before 1.10.1; 1.11.0 |
| CVE-2016-0742 | 7.5 | Feb 15 | The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a… Affected: 0.6.18 before 1.8.1; 1.9.0 before 1.9.10 |
| CVE-2021-3618 | 7.4 | Mar 23 | ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain… Affected: before 1.21.0 |
| CVE-2022-41742 | 7.1 | Oct 19 | NGINX ngx_http_mp4_module vulnerability CVE-2022-41742 Affected: Mainline before 1.23.2; Stable before 1.22.1 |
Showing 13