CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

10 matches found

EUVD•added 2025/10/07 12:30 a.m.•4 views

EUVD-2019-4620

Malware in sbrugna...

9.8CVSS9.3AI score0.01597EPSS

Exploits1References3

RedhatCVE•added 2025/05/22 7:54 a.m.•9 views

CVE-2019-12207

njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxtutf8decode in nxt/nxtutf8.c...

9.8CVSS7AI score0.01823EPSS

Exploits1References1

Check Point Advisories•added 2020/05/27 12:0 a.m.•20 views

NGINX NJS Heap-Based Buffer Overflow (CVE-2019-12207)

A heap-based buffer overflow vulnerability exists in NGINX NJS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

7.5CVSS5.5AI score0.01823EPSS

Exploits1

IBM Security Bulletins•added 2020/03/06 8:58 p.m.•42 views

Security Bulletin: Security Vulnerabilities affect IBM Cloud Private for Data V2.1.0 NGINX (CVE-2019-12206, CVE-2019-12207, CVE-2019-12208, CVE-2019-20372), Docker (CVE-2019-17149, CVE-2019-17150), Kubernetes (CVE-2019-11245, CVE-2019-11253, CVE-2019-1022

Summary Security Bulletin: Security Vulnerabilities affect IBM Cloud Private for Data V2.1.0 NGINX CVE-2019-12206, CVE-2019-12207, CVE-2019-12208, CVE-2019-20372, Docker CVE-2019-17149, CVE-2019-17150, Kubernetes CVE-2019-11245, CVE-2019-11253, CVE-2019-10223, CVE-2019-17110 Vulnerability Details...

9.8CVSS1.2AI score0.25939EPSS

Exploits10Affected Software1

IBM Security Bulletins•added 2020/02/28 1:17 a.m.•29 views

Security Bulletin: Aspera Web Shares application is affected by NGINX Vulnerabilities (CVE-2019-12208, CVE-2019-12207)

Summary IBM Aspera Shares has addressed the following NGINX vulnerabilities. Vulnerability Details CVEID: CVE-2019-12208 DESCRIPTION: NGINX njs is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the njsfunctionnativecall function in njs/njsfunction.c. By sending...

9.8CVSS3.1AI score0.01823EPSS

Exploits2Affected Software1

CVE•added 2019/06/29 11:29 p.m.•92 views

CVE-2019-13067

CVE-2019-13067 affects njs up to 0.3.3, used in NGINX. It is a buffer over-read in nxt_utf8_decode (nxt/nxt_utf8.c) occurring after the CVE-2019-12207 fix. CVSS: 2.0/3.0 vectors indicate HIGH/CRITICAL impact. Connected documents confirm the same root cause and describe remediation steps for IBM C...

9.8CVSS9.4AI score0.01597EPSS

Exploits1References1Affected Software1

Circl•added 2019/05/20 2:51 p.m.•7 views

CVE-2019-12207

creationtimestamp| type| source ---|---|--- 2019-05-20 14:51:18+00:00| seen| https://t.me/cvemitreorg/80...

9.8CVSS7.3AI score0.01823EPSS

Exploits1References1

OSV•added 2019/05/20 2:29 p.m.•26 views

CVE-2019-12207

njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxtutf8decode in nxt/nxtutf8.c...

9.8CVSS6.9AI score

Exploits0References1

CVE•added 2019/05/20 1:28 p.m.•86 views

CVE-2019-12207

CVE-2019-12207 affects njs (through 0.3.1) used with NGINX, caused by a heap-based buffer over-read in nxt_utf8_decode (nxt/nxt_utf8.c). CVSS v3 base score 9.8 (CRITICAL) indicates high impact on confidentiality, integrity, and availability with network access and no authentication. The provided ...

9.8CVSS9.3AI score0.01823EPSS

Exploits1References1Affected Software1