OESA-2026-1907 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: When the ngxmailauthhttpmodule module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate. This issue may occ...

BIT-NGINX-2026-27654 NGINX ngx_http_dav_module vulnerability

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpdavmodule module that might allow an attacker to trigger a buffer overflow to the NGINX worker process; this vulnerability may result in termination of the NGINX worker process or modification of source or destination file names...

SUSE CVE-2026-27654

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpdavmodule module that might allow an attacker to trigger a buffer overflow to the NGINX worker process; this vulnerability may result in termination of the NGINX worker process or modification of source or destination file names...

AZL-80774 CVE-2026-27654 affecting package nginx for versions less than 1.28.3-1

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpdavmodule module that might allow an attacker to trigger a buffer overflow to the NGINX worker process; this vulnerability may result in termination of the NGINX worker process or modification of source or destination file names...

AZL-80771 CVE-2026-27651 affecting package nginx for versions less than 1.28.3-1

When the ngxmailauthhttpmodule module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate. This issue may occur when 1 CRAM-MD5 or APOP authentication is enabled, and 2 the authentication server permits retry by returning the Auth-Wait...

CVE-2026-27651 NGINX ngx_mail_auth_http_module vulnerability

When the ngxmailauthhttpmodule module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate. This issue may occur when 1 CRAM-MD5 or APOP authentication is enabled, and 2 the authentication server permits retry by returning the Auth-Wait...

EUVD-2019-11493

Malware in sbrugna...

EUVD-2013-2799

Malware in sbrugna...

EUVD-2011-3832

Malware in sbrugna...

EUVD-2018-8641

Malware in sbrugna...

EUVD-2016-5439

Malware in sbrugna...

EUVD-2016-3247

Malware in sbrugna...

EUVD-2010-3998

Malware in sbrugna...

EUVD-2011-0002

Malware in sbrugna...

EUVD-2022-44913

Malicious code in bioql PyPI...

EUVD-2024-34446

Malicious code in bioql PyPI...

EUVD-2025-18248

Malicious code in bioql PyPI...

EUVD-2023-58107

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2019-25043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a string index out of range error and worker-process crash for a Cookie: =abc...

Linux Distros Unpatched Vulnerability : CVE-2014-3199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous...