271 matches found
Ingress-NGINX Controller < 1.13.7 / 1.14.x < 1.14.3 Multiple Vulnerabilities
The version of Ingress-NGINX controller installed on the remote host is prior to 1.13.7 or 1.14.3. It is, therefore, affected by multiple vulnerabilities: - A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/auth-method Ingress annotation can be used to inject...
CLEANSTART-2026-OJ41940 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the ingress-nginx-controller package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...
CVE-2022-23008
On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software...
CVE-2020-7621
strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the 'nginxCmd' function...
EUVD-2020-27020
Malware in sbrugna...
EUVD-2020-27055
Malware in sbrugna...
EUVD-2020-27019
Malware in sbrugna...
EUVD-2020-27054
Malware in sbrugna...
EUVD-2020-20234
Malware in sbrugna...
EUVD-2020-27049
Malware in sbrugna...
EUVD-2020-27063
Malware in sbrugna...
EUVD-2020-27018
Malware in sbrugna...
EUVD-2020-27048
Malware in sbrugna...
EUVD-2020-27053
Malware in sbrugna...
EUVD-2020-27021
Malware in sbrugna...
EUVD-2020-27065
Malware in sbrugna...
EUVD-2021-10137
Malware in sbrugna...
EUVD-2021-10139
Malware in sbrugna...