Lucene search
+L

7179 matches found

OSV
OSV
added 2022/01/31 9:52 a.m.59 views

ALSA-2022:0323 Important: nginx:1.20 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. The following packages have been upgraded to a later upstream version: nginx 1.20.1. BZ2031030 Security Fixes: nginx: Off-by-one in ngxresolvercopy when labels...

7.7CVSS7.1AI score0.53461EPSS
SaveExploits10References2
AlmaLinux
AlmaLinux
added 2022/01/31 9:52 a.m.143 views

Important: nginx:1.20 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. The following packages have been upgraded to a later upstream version: nginx 1.20.1. BZ2031030 Security Fixes: nginx: Off-by-one in ngxresolvercopy when labels...

7.7CVSS8AI score0.53461EPSS
SaveExploits10References2
OSV
OSV
added 2022/01/31 9:52 a.m.44 views

RLSA-2022:0323 Important: nginx:1.20 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. The following packages have been upgraded to a later upstream version: nginx 1.20.1. BZ2031030 Security Fixes: nginx: Off-by-one in ngxresolvercopy when labels...

8.1CVSS7.1AI score0.53461EPSS
SaveExploits10References2
Tenable Nessus
Tenable Nessus
added 2022/01/31 12:00 a.m.169 views

RHEL 8 : nginx:1.20 (RHSA-2022:0323)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0323 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. The followi...

7.7CVSS7.9AI score0.53461EPSS
SaveExploits10References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.26 views

Mageia: Security Advisory (MGASA-2014-0136)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.5AI score0.09293EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.24 views

Mageia: Security Advisory (MGASA-2021-0301)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS7AI score0.53461EPSS
SaveExploits10References5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.19 views

Mageia: Security Advisory (MGASA-2014-0427)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.05654EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.27 views

Mageia: Security Advisory (MGASA-2020-0231)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.2AI score0.14961EPSS
SaveExploits3References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.35 views

Mageia: Security Advisory (MGASA-2021-0540)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS7.7AI score0.02036EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.30 views

Mageia: Security Advisory (MGASA-2013-0349)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.6AI score0.67718EPSS
SaveExploits16References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.37 views

Mageia: Security Advisory (MGASA-2017-0231)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.62597EPSS
SaveExploits6References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.37 views

Mageia: Security Advisory (MGASA-2018-0459)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS7.1AI score0.47057EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.33 views

Mageia: Security Advisory (MGASA-2019-0342)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.81556EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.34 views

Mageia: Security Advisory (MGASA-2013-0160)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS9.5AI score0.11925EPSS
SaveExploits3References5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.41 views

Mageia: Security Advisory (MGASA-2016-0216)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.16376EPSS
SaveExploits0References3
Talos
Talos
added 2022/01/26 12:00 a.m.38 views

Reolink RLC-410W web server misconfiguration information disclosure vulnerability

Summary An information disclosure vulnerability exists due to a web server misconfiguration in the reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability. Tested...

8.1CVSS7.6AI score0.01812EPSS
SaveExploits1
NVD
NVD
added 2022/01/25 8:15 p.m.29 views

CVE-2022-23008

On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software...

5.5CVSS0.0053EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/25 8:15 p.m.10 views

CVE-2022-23008

On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software...

5.5CVSS6.2AI score0.0053EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/25 8:15 p.m.8 views

CVE-2022-23008

On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software...

5.4CVSS6.2AI score0.0053EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/25 8:15 p.m.21 views

Code injection

On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software...

5.5CVSS5.5AI score0.0053EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder