Lucene search
+L

6907 matches found

OSV
OSV
added 2022/11/15 12:00 a.m.66 views

DSA-5281-1 nginx - security update

Bulletin has no description...

7.8CVSS7.3AI score0.01119EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2022/11/11 12:00 a.m.27 views

Fedora: Security Advisory for nginx (FEDORA-2022-12721789aa)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.2AI score0.01119EPSS
SaveExploits2References2
Fedora
Fedora
added 2022/11/10 10:49 p.m.57 views

[SECURITY] Fedora 37 Update: nginx-1.22.1-1.fc37

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...

7.8CVSS2.2AI score0.01119EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2022/11/10 4:56 a.m.83 views

CVE-2022-41742

A vulnerability was found in NGINX’s module, ngxhttpmp4module. This flaw allows a local attacker to cause a worker process crash or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products built with ngxhttpmp4module...

7.1CVSS6.7AI score0.01119EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
added 2022/11/10 4:55 a.m.90 views

CVE-2022-41741

A vulnerability was found in NGINX's module, ngxhttpmp4module. This flaw allows a local attacker to corrupt NGINX worker memory, resulting in its termination using a specially crafted audio or video file. The issue affects only NGINX products built with ngxhttpmp4module when the mp4 directive is...

7.8CVSS7.3AI score0.00778EPSS
SaveExploits2References4
Broadcom
Broadcom
added 2022/11/08 12:00 a.m.88 views

CVE-2021-23017: NGINX Resolver Vulnerability

Security Advisory ID : BSA-2021-1516 Component : NGINX Revision : 1.0 A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

7.7CVSS7.2AI score0.53461EPSS
SaveExploits10
Broadcom
Broadcom
added 2022/11/08 12:00 a.m.1729 views

CVE-2021-23017: NGINX Resolver Vulnerability

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact. Products Affected. Brocade SANnav - Fixed in Brocade SANnav 2.2.1...

7.7CVSS0.9AI score0.53461EPSS
SaveExploits10
CBLMariner
CBLMariner
added 2022/11/03 8:37 p.m.41 views

CVE-2022-41742 affecting package nginx for versions less than 1.22.1-1

CVE-2022-41742 affecting package nginx for versions less than 1.22.1-1. An upgraded version of the package is available that resolves this issue...

7.1CVSS7.5AI score0.01119EPSS
SaveExploits2
CBLMariner
CBLMariner
added 2022/11/03 8:37 p.m.42 views

CVE-2022-41741 affecting package nginx for versions less than 1.22.1-1

CVE-2022-41741 affecting package nginx for versions less than 1.22.1-1. An upgraded version of the package is available that resolves this issue...

7.8CVSS7.5AI score0.00778EPSS
SaveExploits2
CBLMariner
CBLMariner
added 2022/11/03 12:44 a.m.18 views

CVE-2022-3638 affecting package nginx 1.20.1-3

CVE-2022-3638 affecting package nginx 1.20.1-3. An upgraded version of the package is available that resolves this issue...

7.4AI score
SaveExploits0
CBLMariner
CBLMariner
added 2022/11/03 12:44 a.m.27 views

CVE-2022-41742 affecting package nginx 1.20.1-3

CVE-2022-41742 affecting package nginx 1.20.1-3. An upgraded version of the package is available that resolves this issue...

7.1CVSS7.4AI score0.01119EPSS
SaveExploits2
CBLMariner
CBLMariner
added 2022/11/03 12:44 a.m.61 views

CVE-2022-41741 affecting package nginx 1.20.1-3

CVE-2022-41741 affecting package nginx 1.20.1-3. An upgraded version of the package is available that resolves this issue...

7.8CVSS7.4AI score0.00778EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
added 2022/11/03 12:00 a.m.11 views

The vulnerability of the njs_json_parse_iterator_call function (njs_json.c) in the njs interpreter of the nginx server allows a hacker to execute arbitrary code.

The vulnerability of the njsjsonparseiteratorcall function njsjson.c in the njs interpreter of the nginx server is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.00923EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/03 12:00 a.m.8 views

The vulnerability of the njs_scope_valid_value function (njs_scope.h) in the NJS interpreter of the nginx server allows a attacker to cause a service failure.

The vulnerability of the njsscopevalidvalue function in the njs interpreter of the nginx server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.8CVSS7.6AI score0.0082EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/03 12:00 a.m.12 views

The vulnerability of the njs_promise_reaction_job function in the njs interpreter of the nginx server allows a attacker to cause a service failure.

The vulnerability of the njspromisereactionjob function in the njs interpreter of the nginx server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.8CVSS7.6AI score0.00748EPSS
SaveExploits1References2Affected Software1
Photon
Photon
added 2022/11/02 12:00 a.m.76 views

Important Photon OS Security Update - PHSA-2022-4.0-0272

Updates of 'openssl', 'nginx' packages of Photon OS have been released...

7.7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2022/11/01 4:25 p.m.107 views

CVE-2022-3638

A flaw was found in NGINX. There is a possible memory leak in ngxresolver.c, which can affect service availability...

5.9CVSS3AI score
SaveExploits0References4
Photon
Photon
added 2022/11/01 12:00 a.m.40 views

Important Photon OS Security Update - PHSA-2022-3.0-0481

Updates of 'nginx' packages of Photon OS have been released...

1.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/10/31 12:00 a.m.15 views

The vulnerability of the ngx_resolver.c component in the nginx HTTP server allows a attacker to cause a service failure.

The vulnerability of the ngxresolver.c component in the nginx HTTP server is related to memory allocation errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS6.9AI score
SaveExploits0References5Affected Software1
ALT Linux
ALT Linux
added 2022/10/31 12:00 a.m.71 views

Security fix for the ALT Linux 9 package nginx version 1.22.1-alt1

1.22.1-alt1 built Oct. 31, 2022 Anton Farygin in task 308764 Oct. 21, 2022 Anton Farygin - 1.22.1 Fixes: CVE-2022-41741, CVE-2022-41742...

7.2AI score0.01119EPSS
SaveExploits2
Rows per page
Query Builder