Known vulnerabilities in NGINX Open Source - page 2

Software CPE: cpe:2.3:a:f5_networks:nginx:*:*:*:*:*:*:*:*
Total vulnerabilities: 65
Public exploits: 10
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NGINX Open Source NGINX Open Source is affected by 65 known vulnerabilities: 2 critical, 14 high, 46 medium, 3 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124470 - Incorrect Authorization
CVE-2026-28755
CWE-863 Medium
No
No
1.28.3, 1.29.7 25.03.2026 SB2026032585
SB20260325200
SB2026081734
#VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-1642
CWE-349 Medium
No
No
1.28.2, 1.29.5 05.02.2026 SB2026020501
SB2026020505
SB2026020511
and 22 more
#VU114082 - Out-of-bounds read
CVE-2025-53859
CWE-125 Low
No
No
1.29.1 14.08.2025 SB2025081427
SB2025082564
SB2025082961
and 12 more
#VU103686 - Improper Authentication
CVE-2025-23419
CWE-287 Low
No
No
1.26.3, 1.27.4 06.02.2025 SB2025020653
SB2025020670
SB2025020671
and 17 more
#VU96020 - Out-of-bounds read
CVE-2024-7347
CWE-125 Medium
No
No
1.26.2, 1.27.1 14.08.2024 SB2024081481
SB2024081706
SB2024081707
and 25 more
#VU90994 - Use After Free
CVE-2024-34161
CWE-416 Medium
No
No
1.26.1 04.06.2024 SB2024060431
SB2024083007
SB2026052221
#VU90993 - Out-of-bounds write
CVE-2024-32760
CWE-787 Medium
No
No
1.26.1 04.06.2024 SB2024060431
SB2024083007
SB20241015123
and 1 more
#VU90991 - Stack-based buffer overflow
CVE-2024-31079
CWE-121 Medium
No
No
1.26.1 04.06.2024 SB2024060431
SB2024083007
SB2026052221
#VU76699 - Integer overflow
CVE-2017-20005
CWE-190 High
No
No
1.13.6 31.05.2023 SB2021060735
SB2024080137
SB2024080138
and 2 more
#VU68495 - Out-of-bounds read
CVE-2022-41742
CWE-125 Medium
No
No
1.22.1, 1.23.2 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 34 more
#VU68494 - Out-of-bounds read
CVE-2022-41741
CWE-125 Medium
No
No
1.22.1, 1.23.2 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 32 more
#VU59319 - Origin Validation Error
CVE-2021-3618
CWE-346 Medium
No
No
1.21.0 09.01.2022 SB2022010903
SB2022010904
SB2022010905
and 37 more
#VU56737 - Resource exhaustion
CVE-2016-0747
CWE-400 High
No
No
1.8.1, 1.9.10 21.09.2021 SB2016021501
SB2024080137
SB2024080138
and 7 more
#VU56736 - Use After Free
CVE-2016-0746
CWE-416 High
No
No
1.8.1, 1.9.10 21.09.2021 SB2016021501
SB2024080137
SB2024080138
and 7 more
#VU56735 - NULL Pointer Dereference
CVE-2016-0742
CWE-476 Medium
No
No
1.8.1, 1.9.10 21.09.2021 SB2016021501
SB2024080137
SB2024080138
and 7 more
#VU53543 - Off-by-one Error
CVE-2021-23017
CWE-193 High
Available
No
1.20.1 25.05.2021 SB2021052543
SB2021052713
SB2021052901
and 48 more
#VU24230 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20372
CWE-444 Medium
Available
No
1.17.7 13.01.2020 SB2020011323
SB2020011324
SB2020021002
and 10 more
#VU15743 - Out-of-bounds read
CVE-2018-16845
CWE-125 Medium
No
No
1.14.1, 1.15.6 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 11 more
#VU7410 - Integer overflow
CVE-2017-7529
CWE-190 Medium
Available
No
1.12.1, 1.13.3 11.07.2017 SB2017071109
SB2017071214
SB2017071305
and 12 more
#VU25 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2016-4450
CWE-829 Medium
No
No
1.10.1, 1.11.1 24.06.2016 SB2016053101
SB2016060202
SB2016060102
and 14 more


Showing elements 21 - 40 out of 65