CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

RedhatCVE•added 2025/05/22 10:31 p.m.•7 views

CVE-2022-25139

njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njsawaitfulfilled...

9.8CVSS7.3AI score0.01591EPSS

Exploits1References1

OSV•added 2023/08/31 12:14 p.m.•3 views

BELL-CVE-2022-25139 CVE-2022-25139 does not affect BellSoft software

Bulletin has no description...

9.8CVSS5.8AI score0.01591EPSS

Exploits1References1

ATTACKERKB•added 2022/02/14 10:15 p.m.•5 views

CVE-2022-25139

njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njsawaitfulfilled...

9.8CVSS7.2AI score0.01591EPSS

Exploits1References4

OSV•added 2022/02/14 10:15 p.m.•25 views

CVE-2022-25139

njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njsawaitfulfilled...

9.8CVSS7.3AI score

Exploits0References3

CVE•added 2022/02/14 9:47 p.m.•197 views

CVE-2022-25139

CVE-2022-25139 affects njs up to version 0.7.0 (used in NGINX). The issue is a heap use-after-free in njs_await_fulfilled. CVSS metrics indicate High/CRITICAL impact across confidentiality, integrity, and availability (BASE scores: 7.5/9.8). The connected documents confirm the vulnerable componen...

9.8CVSS9.5AI score0.01591EPSS

Exploits1References3Affected Software1