Lucene search
+L

565 matches found

OSV
OSV
added 2026/03/27 7:10 a.m.6 views

BIT-NGINX-2026-27784 NGINX ngx_http_mp4_module vulnerability

The 32-bit implementation of NGINX Open Source has a vulnerability in the ngxhttpmp4module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it i...

8.5CVSS5.9AI score0.01031EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
added 2026/03/25 12:24 a.m.10 views

SUSE CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...

7.8CVSS6.1AI score0.00918EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2026/03/25 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-32647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write ...

8.5CVSS7.8AI score0.00918EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/24 3:16 p.m.9 views

CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...

8.5CVSS0.00918EPSS
SaveExploits0References19
OSV
OSV
added 2026/03/24 3:16 p.m.6 views

DEBIAN-CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...

8.5CVSS9.2AI score0.00918EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/24 3:16 p.m.8 views

CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...

8.5CVSS7.5AI score
SaveExploits0References19
NVD
NVD
added 2026/03/24 3:16 p.m.10 views

CVE-2026-27784

The 32-bit implementation of NGINX Open Source has a vulnerability in the ngxhttpmp4module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it i...

8.5CVSS0.01031EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
added 2026/03/24 3:16 p.m.12 views

CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...

8.5CVSS5.9AI score0.00918EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/24 2:13 p.m.7 views

CVE-2026-27784

The 32-bit implementation of NGINX Open Source has a vulnerability in the ngxhttpmp4module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it i...

8.5CVSS5.8AI score0.01031EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2026/03/24 2:13 p.m.12 views

CVE-2026-27784

The 32-bit implementation of NGINX Open Source has a vulnerability in the ngxhttpmp4module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it i...

8.5CVSS5.8AI score0.01031EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/03/24 2:13 p.m.5 views

CVE-2026-27784 NGINX ngx_http_mp4_module vulnerability

The 32-bit implementation of NGINX Open Source has a vulnerability in the ngxhttpmp4module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it i...

8.5CVSS5.8AI score0.01031EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/24 2:13 p.m.11 views

CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...

8.5CVSS6.1AI score0.00918EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/03/24 2:13 p.m.14 views

CVE-2026-27784

The 32-bit implementation of NGINX Open Source has a vulnerability in the ngxhttpmp4module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it i...

8.5CVSS5.5AI score0.01031EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/03/24 2:13 p.m.13 views

CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affect...

8.5CVSS9.2AI score0.00918EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/03/24 12:00 a.m.13 views

PT-2026-27431

Name of the Vulnerable Software and Affected Versions NGINX Open Source affected versions not specified Description The 32-bit implementation of NGINX Open Source contains an issue within the ngx http mp4 module module. This can allow an attacker to read from or write to NGINX worker memory,...

8.8CVSS5.8AI score0.21009EPSS
SaveExploits2References94
Positive Technologies
Positive Technologies
added 2026/03/24 12:00 a.m.20 views

PT-2026-27436

Name of the Vulnerable Software and Affected Versions NGINX Open Source and NGINX Plus versions affected versions not specified Description NGINX Open Source and NGINX Plus, when built with the ngx http mp4 module module and configured with the mp4 directive, are susceptible to a buffer over-read...

8.5CVSS6.1AI score0.00918EPSS
SaveExploits0References112
EUVD
EUVD
added 2026/03/22 3:31 p.m.10 views

EUVD-2019-19975

Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by processing malformed MP4 files. Attackers can create a crafted MP4 file containing an oversized buffer and load it through the Audio Cutter...

6.9CVSS6AI score0.00127EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/03/22 12:00 a.m.10 views

PT-2026-27005

Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by processing malformed MP4 files. Attackers can create a crafted MP4 file containing an oversized buffer and load it through the Audio Cutter...

6.9CVSS6AI score0.00127EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/03/05 12:00 a.m.10 views

Oracle Linux 9 : nginx:1.24 (ELSA-2026-3638)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-3638 advisory. - Resolves: RHEL-146526 - nginx:1.24/nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections CVE-2026-1642 - Resolves: RHEL-84480 -...

8.2CVSS6.8AI score0.00339EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/01/16 12:24 a.m.13 views

CVE-2025-70303

A heap overflow in the uncvparseconfig function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

5.5CVSS7AI score0.00195EPSS
SaveExploits1References1
Rows per page
Query Builder