Lucene search
K

6249 matches found

Tenable Nessus
Tenable Nessus
added 2019/03/18 12:0 a.m.42 views

Photon OS 1.0: Nginx PHSA-2019-1.0-0211

An update of the nginx package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0211. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid122895...

8.2CVSS7.5AI score0.09801EPSS
Exploits1References2
Cvelist
Cvelist
added 2019/03/17 7:16 p.m.22 views

CVE-2018-11747

Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be generated on installation or the user will be able to provide their own TLS certificate for ingress...

9.4AI score0.00724EPSS
Exploits0References2
The Hacker News
The Hacker News
added 2019/03/12 7:15 a.m.1 views

F5 Networks Acquires NGINX For $670 Million

One of the most important software companies NGINX , which is also behind the very popular open-source web server of the same name, is being acquired by its rival, F5 Networks , in a deal valued at about $670 million. While NGINX is not a name that you have ever heard of, the reality is that you...

6.6AI score
Exploits0
The Hacker News
The Hacker News
added 2019/03/12 7:15 a.m.119 views

F5 Networks Acquires NGINX For $670 Million

One of the most important software companies NGINX, which is also behind the very popular open-source web server of the same name, is being acquired by its rival, F5 Networks, in a deal valued at about $670 million. While NGINX is not a name that you have ever heard of, the reality is that you us...

6.6AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/03/12 12:0 a.m.2 views

The vulnerability of the HTTP/2 server implementation in nginx allows a attacker to trigger a service failure.

The vulnerability of the HTTP/2 server implementation based on nginx is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.8CVSS6.6AI score0.124EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/03/12 12:0 a.m.20 views

The vulnerability of the HTTP/2 server implementation in nginx allows a attacker to trigger a service failure.

The vulnerability of the HTTP/2 server implementation based on nginx is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.8CVSS6.6AI score0.47057EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/03/12 12:0 a.m.3 views

The vulnerability of the ngx_http_mp4_module module in the nginx server allows a attacker to cause a service failure or expose protected information.

Vulnerability of the ngxhttpmp4module module in the nginx proxy server. Exploiting this vulnerability can allow a malicious actor to trigger an infinite loop in the working process, cause a process crash, or gain access to the process’s memory through a specially created mp4 file...

5.8CVSS6.8AI score0.09801EPSS
Exploits1References3Affected Software2
Photon
Photon
added 2019/03/06 12:0 a.m.61 views

Critical Photon OS Security Update - PHSA-2019-0003

Updates of 'python3', 'kubernetes', 'perl', 'openssh', 'libsolv', 'nginx' packages of Photon OS have been released...

7.8CVSS1.6AI score0.86978EPSS
Exploits15
Photon
Photon
added 2019/03/06 12:0 a.m.46 views

Critical Photon OS Security Update - PHSA-2019-3.0-0003

Updates of 'perl', 'libsolv', 'nginx', 'kubernetes', 'python3', 'openssh' packages of Photon OS have been released...

9.8CVSS6.9AI score0.86978EPSS
Exploits12
Tenable Nessus
Tenable Nessus
added 2019/03/05 12:0 a.m.120 views

nginx <= 1.3.13 Insecure Log Permissions

According to its Server response header, the installed version of nginx is prior to or equal to 1.3.13. It is, therefore, affected by a flaw related to creating and handling log files that allows information disclosure due to insecure filesystem permissions. %NASLMINLEVEL 70300 C Tenable Network...

7.5CVSS5.4AI score0.01906EPSS
Exploits1References2
Photon
Photon
added 2019/02/26 12:0 a.m.58 views

Critical Photon OS Security Update - PHSA-2019-0002

Updates of 'kibana', 'curl', 'sqlite', 'libgd', 'nginx', 'linux-esx', 'openjdk8', 'libtiff', 'linux', 'elasticsearch', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

7.5CVSS1.6AI score0.82251EPSS
Exploits13
Photon
Photon
added 2019/02/26 12:0 a.m.63 views

Critical Photon OS Security Update - PHSA-2019-3.0-0002

Updates of 'sqlite', 'libtiff', 'nginx', 'linux', 'openjdk8', 'linux-aws', 'kibana', 'curl', 'elasticsearch', 'linux-esx', 'libgd', 'linux-secure' packages of Photon OS have been released...

9.8CVSS6.6AI score0.82251EPSS
Exploits2
Photon
Photon
added 2019/02/25 12:0 a.m.48 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0211

An update of 'nginx', 'linux' packages of Photon OS has been released...

7.2CVSS0.9AI score0.09801EPSS
Exploits1
Photon
Photon
added 2019/02/25 12:0 a.m.49 views

Important Photon OS Security Update - PHSA-2019-0211

Updates of 'nginx', 'linux', 'linux-esx' packages of Photon OS have been released...

8.2CVSS8AI score0.09801EPSS
Exploits1
Photon
Photon
added 2019/02/21 12:0 a.m.35 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0132

An update of 'kibana', 'python3', 'nginx', 'elasticsearch' packages of Photon OS has been released...

7.5CVSS0.9AI score0.82251EPSS
Exploits3
Photon
Photon
added 2019/02/21 12:0 a.m.36 views

Critical Photon OS Security Update - PHSA-2019-0132

Updates of 'elasticsearch', 'python3', 'kibana', 'nginx', 'sqlite' packages of Photon OS have been released...

9.8CVSS1.6AI score0.82251EPSS
Exploits2
Hacker One
Hacker One
added 2019/02/19 2:10 p.m.36 views

New Relic: Password theft login.newrelic.com via Request Smuggling

Hi, The Rails application at login.newrelic.com is accessed through a proxy written in Golang, and an nginx server. By sending an ambiguous request, an attacker can desynchronize these servers, leaving the socket to the backend poisoned with a harmful response. This response will then be served u...

0.2AI score
Exploits0
OpenVAS
OpenVAS
added 2019/02/19 12:0 a.m.36 views

openSUSE: Security Advisory for nginx (openSUSE-SU-2019:0195-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.2CVSS7.4AI score0.47057EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2019/02/19 12:0 a.m.75 views

openSUSE Security Update : nginx (openSUSE-2019-195)

This update for nginx fixes the following issues : nginx was updated to 1.14.2 : - Bugfix: nginx could not be built on Fedora 28 Linux. - Bugfix: in handling of client addresses when using unix domain listen sockets to work with datagrams on Linux. - Change: the logging level of the 'http request...

8.2CVSS6.7AI score0.47057EPSS
Exploits1References6
OPENSUSE Linux
OPENSUSE Linux
added 2019/02/18 12:0 a.m.212 views

Security update for nginx (moderate)

openSUSE Security Update: Security update for nginx Announcement ID: openSUSE-SU-2019:0195-1 Rating: moderate References: 1115015 1115022 1115025 Cross-References: CVE-2018-16843 CVE-2018-16844 CVE-2018-16845 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 SUSE Package Hub for SUSE Linux...

8.2CVSS7.6AI score0.47057EPSS
Exploits1References3
Rows per page
Query Builder