Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-23851

Malware in sbrugna...

5.3CVSS5.2AI score0.00423EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/22 5:37 p.m.9 views

CVE-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

5.3CVSS6.7AI score0.00423EPSS
Exploits0
OSV
OSV
added 2024/03/06 10:59 a.m.24 views

BIT-OPENRESTY-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

5.3CVSS6AI score0.00423EPSS
Exploits0References6
Veracode
Veracode
added 2022/04/16 7:11 p.m.40 views

Authentication Bypass

ngxhttpluamodule is vulnerable to authentication bypass. The vulnerability exists because it doesn't properly restrict the user inputs which allows an attacker to insert unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

5.3CVSS4.5AI score0.00423EPSS
Exploits0References5Affected Software3
OSV
OSV
added 2021/04/06 7:15 p.m.28 views

CVE-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

5.3CVSS6.6AI score
Exploits0References5
OSV
OSV
added 2021/04/06 7:15 p.m.1 views

DEBIAN-CVE-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

5.3CVSS5.6AI score0.00423EPSS
Exploits0References1
OSV
OSV
added 2021/04/06 7:15 p.m.1 views

UBUNTU-CVE-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

5.3CVSS6AI score0.00423EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2021/04/06 12:0 a.m.3 views

PT-2021-11997 · Unknown +3 · Ngx Http Lua Module +3

Name of the Vulnerable Software and Affected Versions: ngx http lua module aka lua-nginx-module versions prior to 0.10.16 Description: The issue allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header. Recommendations: For versions prior to...

7.7CVSS6.5AI score0.02474EPSS
Exploits1References29
Rows per page
Query Builder