Lucene search
K

6262 matches found

OSV
OSV
added 2022/04/15 2:15 p.m.23 views

CVE-2022-28049

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...

5.5CVSS7.3AI score
Exploits0References3
Prion
Prion
added 2022/04/15 2:15 p.m.19 views

Null pointer dereference

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...

4.3CVSS5.5AI score0.00781EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/04/15 1:6 p.m.23 views

CVE-2022-28049

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...

5.8AI score0.00781EPSS
Exploits1References3
CVE
CVE
added 2022/04/15 1:6 p.m.79 views

CVE-2022-28049

CVE-2022-28049 affects NGINX NJS 0.7.2, where a NULL pointer dereference in the njs_vmcode.c component (njs_vmcode_array) can cause a crash/denial of service. Connected sources confirm the same description across multiple databases (no explicit patch/version fix detailed). No exploitation or work...

5.5CVSS5.5AI score0.00781EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2022/04/15 12:0 a.m.3 views

Nginx代码问题漏洞

A denial of service vulnerability exists in Nginx NJS version 0.7.2, which stems from the njsvmcodearray component in /src/njsvmcode.c containing a NULL pointer dereference. An attacker could exploit this vulnerability to cause the program to crash...

5.5CVSS5.6AI score0.00781EPSS
Exploits1References4
Photon
Photon
added 2022/04/15 12:0 a.m.57 views

Important Photon OS Security Update - PHSA-2022-0172

Updates of 'xz', 'gzip', 'nginx' packages of Photon OS have been released...

5.8CVSS1.7AI score0.04301EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2022/04/15 12:0 a.m.2 views

The vulnerability of the Nginx Proxy Manager, a proxy server for managing hosts, arises from its lack of security measures to protect the structure of web pages. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Nginx web server proxy management server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

8.3CVSS5.5AI score0.71209EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/14 3:15 p.m.3 views

CVE-2022-27008

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat when a slow array appended element is fast array...

7.5CVSS5.9AI score0.01649EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2022/04/14 3:15 p.m.2 views

CVE-2022-27007

nginx njs 0.7.2 is affected suffers from Use-after-free in njsfunctionframealloc when it try to invoke from a restored frame saved with njsfunctionframesave...

9.8CVSS5.9AI score0.01545EPSS
Exploits1References4
NVD
NVD
added 2022/04/14 3:15 p.m.21 views

CVE-2022-27007

nginx njs 0.7.2 is affected suffers from Use-after-free in njsfunctionframealloc when it try to invoke from a restored frame saved with njsfunctionframesave...

9.8CVSS0.01545EPSS
Exploits1References3
NVD
NVD
added 2022/04/14 3:15 p.m.18 views

CVE-2022-27008

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat when a slow array appended element is fast array...

7.5CVSS0.01649EPSS
Exploits1References3
OSV
OSV
added 2022/04/14 3:15 p.m.16 views

CVE-2022-27007

nginx njs 0.7.2 is affected suffers from Use-after-free in njsfunctionframealloc when it try to invoke from a restored frame saved with njsfunctionframesave...

9.8CVSS6.8AI score
Exploits0References3
OSV
OSV
added 2022/04/14 3:15 p.m.14 views

CVE-2022-27008

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat when a slow array appended element is fast array...

7.5CVSS6.8AI score
Exploits0References3
Prion
Prion
added 2022/04/14 3:15 p.m.24 views

Design/Logic Flaw

nginx njs 0.7.2 is affected suffers from Use-after-free in njsfunctionframealloc when it try to invoke from a restored frame saved with njsfunctionframesave...

7.5CVSS9.2AI score0.01545EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2022/04/14 3:15 p.m.16 views

Buffer overflow

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat when a slow array appended element is fast array...

5CVSS7.5AI score0.01649EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2022/04/14 2:8 p.m.87 views

CVE-2022-27007

CVE-2022-27007 affects nginx njs 0.7.2. The issue is a Use-after-free in njs_function_frame_alloc() when invoked from a restored frame saved with njs_function_frame_save() , potentially impacting confidentiality, integrity, and availability. Multiple sources corroborate the vulnerability in nginx...

9.8CVSS9.3AI score0.01545EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/04/14 2:8 p.m.26 views

CVE-2022-27007

nginx njs 0.7.2 is affected suffers from Use-after-free in njsfunctionframealloc when it try to invoke from a restored frame saved with njsfunctionframesave...

9.5AI score0.01545EPSS
Exploits1References3
Cvelist
Cvelist
added 2022/04/14 2:4 p.m.23 views

CVE-2022-27008

nginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat when a slow array appended element is fast array...

7.7AI score0.01649EPSS
Exploits1References3
CVE
CVE
added 2022/04/14 2:4 p.m.86 views

CVE-2022-27008

The vulnerability CVE-2022-27008 affects nginx njs 0.7.2. A type confusion in Array.prototype.concat() when a slow array is appended to a fast array leads to a Buffer Overflow in the njs interpreter inside Nginx. This can enable a remote attacker to cause a denial of service. Practical exploitati...

7.5CVSS7.4AI score0.01649EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2022/04/14 12:0 a.m.3 views

Nginx 资源管理错误漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from the US-based Nginx Corporation. A security vulnerability exists in Nginx njs version 0.7.2, which stems from a post-release reference issue with njsawaitfulfilled...

9.8CVSS8.3AI score0.01545EPSS
Exploits1References4
Rows per page
Query Builder