Known vulnerabilities in NGINX Open Source - page 3

Software CPE: cpe:2.3:a:f5_networks:nginx:*:*:*:*:*:*:*:*
Total vulnerabilities: 65
Public exploits: 10
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NGINX Open Source NGINX Open Source is affected by 65 known vulnerabilities: 2 critical, 14 high, 46 medium, 3 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU90995 - NULL Pointer Dereference
CVE-2024-35200
CWE-476 Medium
No
No
1.26.1 04.06.2024 SB2024060431
SB2024083007
SB2026052221
#VU86558 - NULL Pointer Dereference
CVE-2024-24989
CWE-476 Medium
No
No
1.25.4 16.02.2024 SB2024021636
SB2024022701
SB2024092806
and 1 more
#VU86557 - Use After Free
CVE-2024-24990
CWE-416 Medium
No
No
1.25.4 16.02.2024 SB2024021636
SB2024022701
SB2024092806
and 1 more
#VU26234 - Out-of-bounds read
CWE-125 Medium
Available
No
1.17.7 19.03.2020 SB2020031927
#VU20198 - Resource exhaustion
CVE-2019-9516
CWE-400 Medium
No
No
1.16.1, 1.17.3 13.08.2019 SB2019081323
SB2019081602
SB2019081606
and 41 more
#VU20197 - Resource exhaustion
CVE-2019-9513
CWE-400 Medium
No
No
1.16.1, 1.17.3 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 51 more
#VU20196 - Resource exhaustion
CVE-2019-9511
CWE-400 Medium
No
No
1.16.1, 1.17.3 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 55 more
#VU15745 - Resource Management Errors
CVE-2018-16843
CWE-399 Medium
No
No
1.14.1, 1.15.6 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 9 more
#VU15744 - Resource Management Errors
CVE-2018-16844
CWE-399 Medium
No
No
1.14.1, 1.15.6 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 9 more
#VU40985 - Command injection
CVE-2014-3556
CWE-77 Medium
No
No
- 29.12.2014 SB2014122901
SB2015011003
#VU32495 - Improper Access Control
CVE-2014-3616
CWE-284 Medium
No
No
1.7.5 08.12.2014 SB2014120816
SB2014091704
SB2014100112
and 5 more
#VU41742 - Memory corruption
CVE-2014-0088
CWE-119 Medium
No
No
- 29.04.2014 SB2014042904
#VU32617 - Permissions, Privileges, and Access Controls
CVE-2013-4547
CWE-264 Medium
Available
No
1.4.4 23.11.2013 SB2013112305
SB2013112013
SB2013120205
and 2 more
#VU42416 - Permissions, Privileges, and Access Controls
CVE-2013-0337
CWE-264 Medium
No
No
- 27.10.2013 SB2013102702
SB2013100601
SB2013022207
and 1 more
#VU32679 - Permissions, Privileges, and Access Controls
CVE-2013-2070
CWE-264 Medium
No
No
1.2.9 20.07.2013 SB2013072001
SB2013051301
SB2013051412
and 1 more
#VU42707 - Stack-based buffer overflow
CVE-2013-2028
CWE-121 Medium
Available
No
- 20.07.2013 SB2013072002
SB2013051412
SB2013100601
#VU31839 - Memory corruption
CVE-2013-2266
CWE-119 Medium
No
No
- 28.03.2013 SB2013032802
SB2013040407
SB2013032704
and 1 more
#VU32813 - Use After Free
CVE-2012-1180
CWE-416 Medium
No
No
1.0.14, 1.1.17 18.04.2012 SB2012041803
SB2012041908
SB2012040505
and 2 more
#VU32819 - Memory corruption
CVE-2012-2089
CWE-119 Medium
No
No
1.0.15 18.04.2012 SB2012041804
SB2012041911
SB2012050907
and 2 more
#VU32694 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2009-4029
CWE-362 Low
No
No
- 20.12.2009 SB2009122001
SB2013041202
SB2013102503


Showing elements 41 - 60 out of 65