Lucene search
+L

6715 matches found

CVE
CVE
added 2022/06/21 12:57 p.m.85 views

CVE-2022-32414

CVE-2022-32414 concerns Nginx NJS v0.7.2, where a segmentation fault occurs in the njs_vmcode_interpreter function (src/njs_vmcode.c). Technical details across connected sources confirm the affected component (NJS in Nginx) and the root cause is a segmentation violation within the VM code interpr...

5.5CVSS5.5AI score0.00628EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/06/21 12:57 p.m.38 views

CVE-2022-32414

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsvmcodeinterpreter at src/njsvmcode.c...

5.8AI score0.00628EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/06/21 12:57 p.m.33 views

CVE-2022-31307

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsstringoffset at src/njsstring.c...

5.8AI score0.00628EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/21 12:57 p.m.24 views

CVE-2022-31307

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsstringoffset at src/njsstring.c...

5.5CVSS7.2AI score0.00628EPSS
SaveExploits1References4
CVE
CVE
added 2022/06/21 12:57 p.m.89 views

CVE-2022-31307

The provided connected records confirm a concrete vulnerability: Nginx NJS version 0.7.2 contains a segmentation violation in the function njs_string_offset (src/njs_string.c). This is the root cause described consistently across CVE-2022-31307 entries (NVD, Red Hat, OSV, CVE lists). The impact i...

5.5CVSS5.5AI score0.00628EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/06/21 12:57 p.m.26 views

CVE-2022-31306

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsarrayconverttoslowarray at src/njsarray.c...

5.8AI score0.00628EPSS
SaveExploits1References2
CVE
CVE
added 2022/06/21 12:57 p.m.88 views

CVE-2022-31306

CVE-2022-31306 affects Nginx NJS v0.7.2, where the vulnerability is a segmentation violation in the function njs_array_convert_to_slow_array located in src/njs_array.c. The connected documents explicitly describe the issue as a segmentation fault in that function, with no additional details on af...

5.5CVSS5.5AI score0.00628EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/06/21 12:57 p.m.26 views

CVE-2022-31306

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsarrayconverttoslowarray at src/njsarray.c...

5.5CVSS7.2AI score0.00628EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/06/21 12:0 a.m.6 views

Nginx 资源管理错误漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx, Inc. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS version v0.7.2, which stems from a segmentation violati...

5.5CVSS5.6AI score0.00628EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/21 12:0 a.m.6 views

Nginx 资源管理错误漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx Inc. in the United States. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS version v0.7.2, which stems from a...

5.5CVSS5.6AI score0.00628EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/21 12:0 a.m.7 views

Nginx 资源管理错误漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx Inc. in the United States. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS version v0.7.2, which stems from a...

5.5CVSS5.6AI score0.00628EPSS
SaveExploits1References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:15 p.m.2 views

Malicious code in nginx-data-transfer-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eb307be5946f29ef874fb677a7a6bd4e20c77381dbb95382223a837f3ffa621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:15 p.m.8 views

MAL-2022-4846 Malicious code in nginx-data-transfer-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eb307be5946f29ef874fb677a7a6bd4e20c77381dbb95382223a837f3ffa621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Kubernetes Security Advisories
Kubernetes Security Advisories
added 2022/06/10 4:1 p.m.11 views

Ingress-nginx `path` sanitization can be bypassed with newline character

Issue Details A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the spec.rules.http.paths.path field of an Ingress object in the networking.k8s.io or extensions API group to obtain the...

7.6CVSS6.6AI score0.00694EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/10 4:0 p.m.4 views

CVE-2021-25748

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the spec.rules.http.paths.path field of an Ingress object in the networking.k8s.io or extensions API group to obtain the credentials of...

7.6CVSS6.8AI score0.00694EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/06/09 12:0 a.m.36 views

Nginx NJS Denial of Service Vulnerability

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from the U.S. company Nginx. njs is one of the scripting language components that support extended NGINX functionality . A denial of service vulnerability exists in Nginx NJS version v0.7.2, which stems from a...

5.5CVSS5.4AI score0.00384EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.46 views

Nginx NJS Denial of Service Vulnerability (CNVD-2022-66506)

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx Inc. njs is one of the scripting language components that supports extended NGINX functionality . A denial of service vulnerability exists in Nginx NJS version v0.7.2, which stems from a segmentatio...

5.5CVSS5.4AI score0.00384EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.48 views

Nginx NJS Denial of Service Vulnerability (CNVD-2022-66505)

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx Inc. njs is one of the scripting language components that supports extended NGINX functionality . A denial of service vulnerability exists in Nginx NJS version v0.7.2, which originates from a...

5.5CVSS5.4AI score0.0028EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2022/06/06 12:0 a.m.604 views

Reolink E1 Zoom Camera 3.0.0.716 Configuration Disclosure

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: Reolink E1 Zoom Camera Vendor URL: https://reolink.com/product/e1-zoom/ Type: Exposure of Sensitive Information to an Unauthorized Actor CWE-200 Date found: 2021-08-26 Date published:...

7.6AI score0.03643EPSS
SaveExploits4
CBLMariner
CBLMariner
added 2022/06/03 5:54 p.m.27 views

CVE-2021-3618 affecting package nginx for versions less than 1.20.2-2

CVE-2021-3618 affecting package nginx for versions less than 1.20.2-2. A patched version of the package is available...

7.4CVSS7.6AI score0.02036EPSS
SaveExploits0
Rows per page
Query Builder