Lucene search
+L

9356 matches found

Redos
Redos
•added 2021/09/08 12:00 a.m.•40 views

ROS-2-1336

2.1336 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

7.8CVSS8.1AI score0.53461EPSS
SaveExploits10
Redos
Redos
•added 2021/09/08 12:00 a.m.•14 views

ROS-2-2106

2.2106 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

7.8CVSS7.9AI score0.53461EPSS
SaveExploits11
Redos
Redos
•added 2021/09/08 12:00 a.m.•63 views

ROS-2-476

2.476 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote attacke...

8.1CVSS8.1AI score0.53461EPSS
SaveExploits11
Redos
Redos
•added 2021/09/08 12:00 a.m.•42 views

ROS-2-833

2.833 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote attacke...

9.8CVSS7.8AI score0.53461EPSS
SaveExploits17
Redos
Redos
•added 2021/09/08 12:00 a.m.•39 views

ROS-2-1678

2.1678 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

7.7CVSS8.3AI score0.53461EPSS
SaveExploits10
Redos
Redos
•added 2021/09/08 12:00 a.m.•16 views

ROS-2-1953

2.1953 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

9.8CVSS8.5AI score0.53461EPSS
SaveExploits13
Redos
Redos
•added 2021/09/08 12:00 a.m.•23 views

ROS-2-1632

2.1632 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

7.8CVSS7.9AI score0.53461EPSS
SaveExploits11
Redos
Redos
•added 2021/09/08 12:00 a.m.•24 views

ROS-2-2074

2.2074 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

7.8CVSS8.1AI score0.99962EPSS
SaveExploits95
Redos
Redos
•added 2021/09/08 12:00 a.m.•41 views

ROS-2-688

2.688 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote attacke...

7.7CVSS8.1AI score0.53461EPSS
SaveExploits10
Redos
Redos
•added 2021/09/08 12:00 a.m.•32 views

ROS-2-1775

2.1775 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

7.8CVSS8.1AI score0.99962EPSS
SaveExploits95
Redos
Redos
•added 2021/09/08 12:00 a.m.•28 views

ROS-2-1893

2.1893 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

9.8CVSS8.6AI score0.53461EPSS
SaveExploits10
Redos
Redos
•added 2021/09/08 12:00 a.m.•25 views

ROS-2-1995

2.1995 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

7.7CVSS8.3AI score0.53461EPSS
SaveExploits10
Redos
Redos
•added 2021/09/08 12:00 a.m.•33 views

ROS-2-1392

2.1392 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

7.8CVSS8.1AI score0.53461EPSS
SaveExploits10
Tenable Nessus
Tenable Nessus
•added 2021/09/07 12:00 a.m.•78 views

EulerOS 2.0 SP5 : nginx (EulerOS-SA-2021-2340)

According to the version of the nginx packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byt...

7.7CVSS7.4AI score0.53461EPSS
SaveExploits10References2
OpenVAS
OpenVAS
•added 2021/09/04 12:00 a.m.•24 views

Huawei EulerOS: Security Advisory for nginx (EulerOS-SA-2021-2340)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS7.5AI score0.53461EPSS
SaveExploits10References2
IBM Security Bulletins
IBM Security Bulletins
•added 2021/08/31 1:55 a.m.•79 views

Security Bulletin: IBM Watson Machine Learning Accelerator is affected by a vulnerability in Nginx

Summary IBM Watson Machine Learning Accelerator is affected by a vulnerability in Nginx. IBM Watson Machine Learning Accelerator havs addressed the CVE-2021-23017. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected...

7.7CVSS7.5AI score0.53461EPSS
SaveExploits10Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/08/25 1:37 p.m.•108 views

Security Bulletin: IBM API Connect V5 is impacted by a vulnerability in nginx. (CVE-2021-23017)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2021-23017 DESCRIPTION: NGINX could allow a remote attacker to execute arbitrary code on the system, caused by an off-by-one error in ngxresolvercopy while processing DNS responses. By sending a...

7.7CVSS8.1AI score0.53461EPSS
SaveExploits10Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/08/25 11:15 a.m.•9 views

Security Bulletin: vulnerabilities in Nginx affect IBM Watson Machine Learning Accelerator 2.3.1

Summary Vulnerabilities existing in the Nginx version used by IBM Watson Machine Learning Accelerator 2.3.1. nginx upgraded to version 1.20.1 which resolves these vulnerabilities, are available on IBM Fix Central. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fix...

2.2AI score
SaveExploits0Affected Software1
The Hacker News
The Hacker News
•added 2021/08/23 1:27 p.m.•481 views

Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems

Close to 14 million Linux-based systems are directly exposed to the Internet, making them a lucrative target for an array of real-world attacks that could result in the deployment of malicious web shells, coin miners, ransomware, and other trojans. That's according to an in-depth look at the Linu...

10CVSS7.7AI score0.99999EPSS
SaveExploits286
OSS-Fuzz
OSS-Fuzz
•added 2021/08/20 8:34 a.m.•11 views

nginx:http_request_fuzzer: Heap-use-after-free in ngx_http_free_request

Detailed Report: https://oss-fuzz.com/testcase?key=4589016058560512 Project: nginx Fuzzing Engine: libFuzzer Fuzz Target: httprequestfuzzer Job Type: libfuzzerasannginx Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x603000008930 Crash State: ngxhttpfreerequest...

5.9AI score
SaveExploits0
Rows per page
Query Builder