Lucene search
+L

248 matches found

NCSC
NCSC
•added 2021/12/07 12:00 a.m.•8 views

Vulnerability fixed in Ngnix

F5 has fixed a vulnerability in NGINX. The vulnerability makes it possible to perform a denial-of-service attack by sending corrupt json data. The vulnerability is specifically in the JSON parser of the ModSecurity WAF module of NGINX Plus. F5 has made updates available to fix the vulnerability...

7.5CVSS6.9AI score0.03145EPSS
SaveExploits2
CNVD
CNVD
•added 2020/04/24 12:00 a.m.•15 views

F5 NGINX Controller Trust Management Issue Vulnerability

F5 NGINX Controller is a centralized monitoring and management platform for NGINX from F5. The platform supports the management of multiple NGINX instances using a visual interface. A security vulnerability exists in F5 NGINX Controller versions prior to 3.2.0, which stems from the fact that by...

7.4CVSS6.8AI score0.01059EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/23 7:15 p.m.•10 views

CVE-2020-5864

In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default...

7.4CVSS7.1AI score0.01059EPSS
SaveExploits0References2
NVD
NVD
•added 2020/04/23 7:15 p.m.•35 views

CVE-2020-5864

In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default...

7.4CVSS7.4AI score0.01059EPSS
SaveExploits0References2
Prion
Prion
•added 2020/04/23 7:15 p.m.•36 views

Default credentials

In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default...

5.8CVSS7.4AI score0.01059EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/04/23 6:32 p.m.•39 views

CVE-2020-5864

In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default...

7.5AI score0.01059EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/23 12:00 a.m.•3 views

CVE-2020-5864: Improper Certificate Validation

In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default...

7.4CVSS7.2AI score0.01059EPSS
SaveExploits0References2
Wallarm Lab
Wallarm Lab
•added 2017/04/06 12:51 a.m.•37 views

Wallarm Teams up with NGINX Plus to Provide Advanced Security

Wallarm is excited to be a pioneer security vendor in NGINX Certified Module program and provide trusted and verified security functionality to NGINX Plus customers. “We are pleased to announce that Wallarm is now part of the NGINX Plus Certified Module program with the Wallarm Next Generation WA...

6.8AI score
SaveExploits0
Rows per page
Query Builder