CVE-2019-9945

SoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution. The NGINX default configuration file has a check to verify the status of a user cookie. If not set, a user is redirected to the login page. An arbitrary value can be provided for this cookie to access the web interface without valid...

OPENSUSE-SU-2019:0195-1 Security update for nginx

This update for nginx fixes the following issues: nginx was updated to 1.14.2: - Bugfix: nginx could not be built on Fedora 28 Linux. - Bugfix: in handling of client addresses when using unix domain listen sockets to work with datagrams on Linux. - Change: the logging level of the 'http request',...

The vulnerability of the Nginx Unit application server arises from overflow in the dynamic memory buffer, allowing attackers to cause service failures.

The vulnerability of the Nginx Unit application server arises from overflowing buffers in dynamic memory. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially crafted request...

Mail.ru: touch.mail.ru / e.mail.ru memory content disclosure

An invalid handling of NUL byte in API request led to disclosure of HTTP server memory region. The root cause of this bug is tracked to nginx+openresty. An advisory is below: Insecure implementation of nginx rewrite / OpenResty ngx.req.seturi + memory content leak in nginx. OpenResty is LUA engin...

CVE-2018-11747

Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be generated on installation or the user will be able to provide their own TLS certificate for ingress...

CVE-2018-11747

Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be generated on installation or the user will be able to provide their own TLS certificate for ingress...

PT-2019-3015

Name of the Vulnerable Software and Affected Versions HTTP/2 implementations affected versions not specified nginx affected versions not specified Node.js affected versions not specified Apache HTTP Server affected versions not specified Windows affected versions not specified Description The iss...

Photon OS 1.0: Nginx PHSA-2019-1.0-0211

An update of the nginx package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0211. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid122895...

Photon OS 2.0: Nginx PHSA-2019-2.0-0132

An update of the nginx package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0132. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid122908...

CVE-2018-11747

Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be generated on installation or the user will be able to provide their own TLS certificate for ingress...

F5 Networks Acquires NGINX For $670 Million

One of the most important software companies NGINX, which is also behind the very popular open-source web server of the same name, is being acquired by its rival, F5 Networks, in a deal valued at about $670 million. While NGINX is not a name that you have ever heard of, the reality is that you us...

F5 Networks Acquires NGINX For $670 Million

One of the most important software companies NGINX , which is also behind the very popular open-source web server of the same name, is being acquired by its rival, F5 Networks , in a deal valued at about $670 million. While NGINX is not a name that you have ever heard of, the reality is that you...

The vulnerability of the HTTP/2 server implementation in nginx allows a attacker to trigger a service failure.

The vulnerability of the HTTP/2 server implementation based on nginx is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the HTTP/2 server implementation in nginx allows a attacker to trigger a service failure.

The vulnerability of the HTTP/2 server implementation based on nginx is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the ngx_http_mp4_module module in the nginx server allows a attacker to cause a service failure or expose protected information.

Vulnerability of the ngxhttpmp4module module in the nginx proxy server. Exploiting this vulnerability can allow a malicious actor to trigger an infinite loop in the working process, cause a process crash, or gain access to the process’s memory through a specially created mp4 file...

Critical Photon OS Security Update - PHSA-2019-3.0-0003

Updates of 'libsolv', 'kubernetes', 'perl', 'openssh', 'nginx', 'python3' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-0003

Updates of 'python3', 'kubernetes', 'perl', 'openssh', 'libsolv', 'nginx' packages of Photon OS have been released...

nginx <= 1.3.13 Insecure Log Permissions

The installed version of nginx is prior to or equal to 1.3.13. It is, therefore, affected by a flaw related to creating and handling log files that allows information disclosure due to insecure filesystem permissions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Critical Photon OS Security Update - PHSA-2019-3.0-0002

Updates of 'linux-esx', 'linux-secure', 'libgd', 'linux-aws', 'linux', 'elasticsearch', 'kibana', 'libtiff', 'sqlite', 'curl', 'openjdk8', 'nginx' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-0002

Updates of 'kibana', 'curl', 'sqlite', 'libgd', 'nginx', 'linux-esx', 'openjdk8', 'libtiff', 'linux', 'elasticsearch', 'linux-secure', 'linux-aws' packages of Photon OS have been released...