8651 matches found
[SECURITY] Fedora 44 Update: nginx-mod-fancyindex-0.6.0-8.fc44
The Fancy Index module makes possible the generation of file listings, like the built-in autoindex module does, but adding a touch of style. This is possible because the module allows a certain degree of customization of the generated content: Custom headers. Either local or stored remotely. Cust...
PT-2026-63978
Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Nginx and Nginx Plus versions prior to 1.26.3 and 1.27.2 Description Apache Roller contains a cross-site scripting issue where an anonymous remote attacker can store a comment containing a javascript: URI link. This...
Fedora 44 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-60fc198d3b)
The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-60fc198d3b advisory. nginx-mod-fancyindex: - Rebuild for 1.30.4 nginx-mod-modsecurity: - Rebuild for 1.30.4 nginx-mod-naxsi: - Rebuild for 1.30.4 nginx-mod-headers-more:...
Oracle Linux 10 : nginx (ELSA-2026-29874)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-29874 advisory. - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-420...
nginx 1.29.2 Configuration Scanner
A proof of concept scanner for nginx version 1.29.2 configuration patterns associated with CVE-2026-42533. Rather than exploiting the vulnerability, the Go-based tool recursively analyzes nginx configuration files for risky combinations of regular expression captures and map variables that may...
CVE-2026-42533 affecting package nginx for versions less than 1.28.3-8
CVE-2026-42533 affecting package nginx for versions less than 1.28.3-8. A patched version of the package is available...
CVE-2026-56434 affecting package nginx for versions less than 1.28.3-8
CVE-2026-56434 affecting package nginx for versions less than 1.28.3-8. A patched version of the package is available...
GHSA-M73P-XG7Q-M8F2 vulnerabilities
Vulnerabilities for packages: nginx-stable, commercial-nginx-plus, nginx-mainline...
GHSA-FXFG-V4RJ-HP95 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller-fips, commercial-nginx-plus, ingress-nginx-controller, nginx-stable, nginx-mainline...
GHSA-VXCV-H5WJ-JXR5 vulnerabilities
Vulnerabilities for packages: nginx-stable, commercial-nginx-plus, nginx-mainline...
CVE-2026-42533 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller-fips, commercial-nginx-plus, ingress-nginx-controller, nginx-stable, nginx-mainline...
CVE-2026-60005 vulnerabilities
Vulnerabilities for packages: nginx-stable, commercial-nginx-plus, nginx-mainline...
CVE-2026-56434 vulnerabilities
Vulnerabilities for packages: nginx-stable, commercial-nginx-plus, nginx-mainline...
Exploit for CVE-2026-42533
NGINX Vulnerability Checker Script para verificar de forma...
nginx security update
1.26.3-6.0.1.el102.5 - Reference oracle-indexhtml within Requires Orabug: 33802044 2:1.26.3-6.5 - Resolves: RHEL-191778 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer...
MiracleLinux 8 : nginx:1.24 (AXSA:2026-1325:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1325:01 advisory. nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Tenable has extracted t...
Oracle Linux 10 : nginx (ELSA-2026-19159)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19159 advisory. - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-420...
CVE-2026-56584
HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...
CVE-2026-56584
HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...
