GHSA-XHV5-W9C5-2R2W Unbounded connection acceptance in http4s-blaze-server

Impact blaze-core, a library underlying http4s-blaze-server, accepts connections unboundedly on its selector pool. This has the net effect of amplifying degradation in services that are unable to handle their current request load, since incoming connections are still accepted and added to an...

DEBIAN-CVE-2011-4968

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack MITM...

Code injection

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack MITM...

UBUNTU-CVE-2011-4968

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack MITM...

jc21 Nginx Proxy Manager Path Traversal Vulnerability

jc21 Nginx Proxy Manager is a graphical user interface for managing Nginx servers. A path traversal vulnerability exists in versions of jc21 Nginx Proxy Manager prior to 2.0.13, which can be exploited by an attacker to access locations outside of a restricted directory...

CVE-2019-15517

jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal...

CVE-2019-15517

jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal...

Directory traversal

jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal...

CVE-2019-15517

jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal...

CVE-2019-15517

jc21 Nginx Proxy Manager

The vulnerability of the Nginx proxy server allows attackers to induce a service failure.

The vulnerability of the Nginx proxy server is related to pointer dereferencing errors. Exploiting this vulnerability allows a malicious actor to cause a service failure incorrect pointer dereferencing and emergency termination of operations through a specially crafted UDP DNS response...

DEBIAN-CVE-2013-2070

http/modules/ngxhttpproxymodule.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxypass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service crash and obtain sensitive information from worker process memory via a crafted proxy response, a simila...