Lucene search
+L

606 matches found

Cvelist
Cvelist
•added 2022/05/12 6:48 p.m.•46 views

CVE-2022-29369

Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njslvlhshbucketfind at njslvlhsh.c...

7.8AI score0.01177EPSS
SaveExploits0References2
CVE
CVE
•added 2022/05/12 6:48 p.m.•117 views

CVE-2022-29369

CVE-2022-29369 affects Nginx NJS v0.7.2. The vulnerability is a segmentation violation caused by a fault in njs_lvlhsh_bucket_find (njs_lvlhsh.c). CVSS details in the sources show CVSS‑2.0/3.1 scores with network attack vector, low complexity, no authentication, and availability impact described ...

7.5CVSS7.5AI score0.01177EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2022/05/12 6:48 p.m.•3 views

CVE-2022-29369

Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njslvlhshbucketfind at njslvlhsh.c...

8.7CVSS0.01177EPSS
SaveExploits0References4
OSV
OSV
•added 2022/05/12 6:48 p.m.•24 views

CVE-2022-29369

Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njslvlhshbucketfind at njslvlhsh.c...

7.3AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/12 12:00 a.m.•7 views

CVE-2022-29369: Improper Check for Unusual or Exceptional Conditions

Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njslvlhshbucketfind at njslvlhsh.c...

7.5CVSS6.5AI score0.01177EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/12 12:00 a.m.•5 views

PT-2022-2606

Name of the Vulnerable Software and Affected Versions Nginx NJS version 0.7.2 Description The issue is related to a segmentation violation via the njs lvlhsh bucket find function at njs lvlhsh.c in the Nginx NJS interpreter. This can lead to an uncontrolled resource consumption, potentially...

7.5CVSS0.01177EPSS
SaveExploits0References8
Veracode
Veracode
•added 2022/05/08 7:43 a.m.•28 views

Use After Free

njs is vulnerable to use after free. The vulnerability exists due to a memory corruption in njsawaitfulfilled...

9.8CVSS1.9AI score0.0163EPSS
SaveExploits1References6Affected Software2
Veracode
Veracode
•added 2022/05/08 2:04 a.m.•38 views

Denial Of Service (DoS)

njs is vulnerable to denial of service. It used in NGINX, was discovered to contain a segmentation violation via njsobjectsetprototype in /src/njsobject.c...

7.5CVSS2.8AI score0.01691EPSS
SaveExploits1References6Affected Software2
Veracode
Veracode
•added 2022/05/08 2:04 a.m.•37 views

Denial Of Service (DoS)

njs is vulnerable to denial of service. An attacker can crash the application through the out-of-bounds array access via njsvmcodetypeof in /src/njsvmcode.c...

9.8CVSS3.4AI score0.03147EPSS
SaveExploits1References6Affected Software2
Positive Technologies
Positive Technologies
•added 2022/05/06 12:00 a.m.•4 views

PT-2022-3701

Name of the Vulnerable Software and Affected Versions Nginx NJS version 0.7.2 Description The issue is related to a segmentation violation in the njs vmcode interpreter function at src/njs vmcode.c. This can lead to an uncontrolled resource consumption. An attacker could potentially exploit this ...

5.5CVSS0.00661EPSS
SaveExploits1References10
BDU FSTEC
BDU FSTEC
•added 2022/04/28 12:00 a.m.•19 views

The vulnerability of the Array.prototype.concat() function in the njs interpreter on the nginx server allows a hacker to cause a service failure.

The vulnerability of the Array.prototype.concat function in the njs interpreter on the nginx server is related to the execution of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS7.7AI score0.01725EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
•added 2022/04/19 12:00 a.m.•46 views

Nginx denial-of-service vulnerability

A denial of service vulnerability exists in Nginx NJS version 0.7.2, which stems from the njsvmcodearray component in /src/njsvmcode.c containing a NULL pointer dereference. An attacker could exploit this vulnerability to cause the program to crash...

4.3CVSS3.9AI score0.00816EPSS
SaveExploits1Affected Software1
attackerkb
attackerkb
•added 2022/04/15 2:15 p.m.•9 views

CVE-2022-28049

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...

5.5CVSS6AI score0.00816EPSS
SaveExploits1References4
NVD
NVD
•added 2022/04/15 2:15 p.m.•30 views

CVE-2022-28049

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...

5.5CVSS0.00816EPSS
SaveExploits1References3
Prion
Prion
•added 2022/04/15 2:15 p.m.•29 views

Null pointer dereference

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...

4.3CVSS5.5AI score0.00816EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2022/04/15 1:06 p.m.•107 views

CVE-2022-28049

CVE-2022-28049 affects NGINX NJS 0.7.2, where a NULL pointer dereference in the njs_vmcode.c component (njs_vmcode_array) can cause a crash/denial of service. Connected sources confirm the same description across multiple databases (no explicit patch/version fix detailed). No exploitation or work...

5.5CVSS5.5AI score0.00816EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2022/04/15 1:06 p.m.•3 views

CVE-2022-28049

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...

6.8CVSS0.00816EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2022/04/15 1:06 p.m.•41 views

CVE-2022-28049

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...

5.8AI score0.00816EPSS
SaveExploits1References3
OSV
OSV
•added 2022/04/15 1:06 p.m.•36 views

CVE-2022-28049

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...

7.3AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/15 12:00 a.m.•5 views

CVE-2022-28049: NULL Pointer Dereference

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...

5.5CVSS5.7AI score0.00816EPSS
SaveExploits1References2
Rows per page
Query Builder