Lucene search
K

21 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-31004

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01055EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 10:37 a.m.6 views

CVE-2024-46256

A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate...

9.8CVSS7.1AI score0.60145EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:47 a.m.8 views

CVE-2024-46257

A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this is not part of any NGINX software shipped by F5...

6.3CVSS8.1AI score0.02597EPSS
Exploits2References1
OSV
OSV
added 2024/09/27 6:15 p.m.26 views

CVE-2024-46257

A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this is not part of any NGINX software shipped by F5...

6.3CVSS7.5AI score0.60145EPSS
Exploits2References4
NVD
NVD
added 2024/09/27 6:15 p.m.22 views

CVE-2024-46256

A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate...

9.8CVSS0.60145EPSS
Exploits2References4
NVD
NVD
added 2024/09/27 6:15 p.m.36 views

CVE-2024-46257

A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this is not part of any NGINX software shipped by F5...

6.3CVSS0.02597EPSS
Exploits2References4
OSV
OSV
added 2024/09/27 6:15 p.m.16 views

CVE-2024-46256

A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate...

9.8CVSS6.8AI score0.60145EPSS
Exploits2References4
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.3 views

NginxProxyManager 安全漏洞

NginxProxyManager is NginxProxyManager individual developer's Docker container for managing Nginx proxy hosts with a simple, powerful interface. A security vulnerability exists in NginxProxyManager version 2.11.3, which stems from the presence of a command injection vulnerability that could allow...

9.8CVSS8.1AI score0.60145EPSS
Exploits2References4
Cvelist
Cvelist
added 2024/09/27 12:0 a.m.18 views

CVE-2024-46256

A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate...

0.60145EPSS
Exploits2References4
CVE
CVE
added 2024/09/27 12:0 a.m.83 views

CVE-2024-46257

CVE-2024-46257 describes a command-injection vulnerability in NginxProxyManager 2.11.3, specifically in the requestLetsEncryptSslWithDnsChallenge path, enabling remote code execution when adding a Let’s Encrypt certificate. Multiple connected sources corroborate that the flaw allows RCE and perta...

6.3CVSS8.1AI score0.02597EPSS
Exploits2References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/27 12:0 a.m.16 views

CVE-2024-46256

A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate...

7.2AI score0.60145EPSS
Exploits2References4
Vulnrichment
Vulnrichment
added 2024/09/27 12:0 a.m.17 views

CVE-2024-46257

A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this is not part of any NGINX software shipped by F5...

6.9AI score0.02597EPSS
Exploits2References4
Cvelist
Cvelist
added 2024/09/27 12:0 a.m.18 views

CVE-2024-46257

A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this is not part of any NGINX software shipped by F5...

0.02597EPSS
Exploits2References4
CVE
CVE
added 2024/09/27 12:0 a.m.85 views

CVE-2024-46256

CVE-2024-46256 affects NginxProxyManager 2.11.3 and is due to a command injection in the requestLetsEncryptSsl routine that enables remote code execution when adding a Let’s Encrypt certificate. The Red Hat/OSV/NVD entries corroborate the same vulnerability description (CVE-2024-46256) and identi...

9.8CVSS7.1AI score0.60145EPSS
Exploits2References4Affected Software1
NVD
NVD
added 2023/03/22 8:15 p.m.8 views

CVE-2023-27224

An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file...

9.8CVSS9.6AI score0.01055EPSS
Exploits1References2
OSV
OSV
added 2023/03/22 8:15 p.m.11 views

CVE-2023-27224

An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file...

9.8CVSS7.9AI score
Exploits0References2
Prion
Prion
added 2023/03/22 8:15 p.m.11 views

Design/Logic Flaw

An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file...

7.5CVSS9.5AI score0.01055EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/22 12:0 a.m.5 views

CVE-2023-27224

An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file...

9.6AI score0.01055EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/03/22 12:0 a.m.0 views

NginxProxyManager 命令注入漏洞

NginxProxyManager is NginxProxyManager individual developer's Docker container for managing Nginx proxy hosts with a simple, powerful interface. A security vulnerability exists in NginxProxyManager version v.2.9.19, which originated from a vulnerability that allows an attacker to execute arbitrar...

9.8CVSS8.9AI score0.01055EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/03/22 12:0 a.m.12 views

CVE-2023-27224

An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file...

9.7AI score0.01055EPSS
Exploits1References2
Rows per page
Query Builder