Known vulnerabilities in NGINX Open Source - page 3

Software CPE: cpe:2.3:a:f5_networks:nginx:*:*:*:*:*:*:*:*
Total vulnerabilities: 59
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NGINX Open Source NGINX Open Source is affected by 59 known vulnerabilities: 2 critical, 11 high, 43 medium, 3 low Critical High Medium Low

Vulnerabilities (59)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56737 - Resource exhaustion
CVE-2016-0747
CWE-400 High
No
No
1.8.1, 1.9.10 21.09.2021 SB2016021501
SB2024080137
SB2024080138
and 7 more
#VU56736 - Use After Free
CVE-2016-0746
CWE-416 High
No
No
1.8.1, 1.9.10 21.09.2021 SB2016021501
SB2024080137
SB2024080138
and 7 more
#VU56735 - NULL Pointer Dereference
CVE-2016-0742
CWE-476 Medium
No
No
1.8.1, 1.9.10 21.09.2021 SB2016021501
SB2024080137
SB2024080138
and 7 more
#VU15745 - Resource Management Errors
CVE-2018-16843
CWE-399 Medium
No
No
1.14.1, 1.15.6 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 9 more
#VU15744 - Resource Management Errors
CVE-2018-16844
CWE-399 Medium
No
No
1.14.1, 1.15.6 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 9 more
#VU15743 - Out-of-bounds read
CVE-2018-16845
CWE-125 Medium
No
No
1.14.1, 1.15.6 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 11 more
#VU7410 - Integer overflow
CVE-2017-7529
CWE-190 Medium
Available
No
1.12.1, 1.13.3 11.07.2017 SB2017071109
SB2017071214
SB2017071305
and 12 more
#VU25 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2016-4450
CWE-829 Medium
No
No
1.10.1, 1.11.1 24.06.2016 SB2016053101
SB2016060202
SB2016060102
and 14 more
#VU40985 - Command injection
CVE-2014-3556
CWE-77 Medium
No
No
- 29.12.2014 SB2014122901
SB2015011003
#VU32495 - Improper Access Control
CVE-2014-3616
CWE-284 Medium
No
No
1.7.5 08.12.2014 SB2014120816
SB2014091704
SB2014100112
and 5 more
#VU41742 - Memory corruption
CVE-2014-0088
CWE-119 Medium
No
No
- 29.04.2014 SB2014042904
#VU32617 - Permissions, Privileges, and Access Controls
CVE-2013-4547
CWE-264 Medium
Available
No
1.4.4 23.11.2013 SB2013112305
SB2013112013
SB2013120205
and 2 more
#VU42416 - Permissions, Privileges, and Access Controls
CVE-2013-0337
CWE-264 Medium
No
No
- 27.10.2013 SB2013102702
SB2013100601
SB2013022207
and 1 more
#VU32679 - Permissions, Privileges, and Access Controls
CVE-2013-2070
CWE-264 Medium
No
No
1.2.9 20.07.2013 SB2013072001
SB2013051301
SB2013051412
and 1 more
#VU42707 - Stack-based buffer overflow
CVE-2013-2028
CWE-121 Medium
Available
No
- 20.07.2013 SB2013072002
SB2013051412
SB2013100601
#VU31839 - Memory corruption
CVE-2013-2266
CWE-119 Medium
No
No
- 28.03.2013 SB2013032802
SB2013040407
SB2013032704
and 1 more
#VU32813 - Use After Free
CVE-2012-1180
CWE-416 Medium
No
No
1.0.14, 1.1.17 18.04.2012 SB2012041803
SB2012041908
SB2012040505
and 2 more
#VU32819 - Memory corruption
CVE-2012-2089
CWE-119 Medium
No
No
1.0.15 18.04.2012 SB2012041804
SB2012041911
SB2012050907
and 2 more
#VU32694 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2009-4029
CWE-362 Low
No
No
- 20.12.2009 SB2009122001
SB2013041202
SB2013102503


Showing elements 41 - 60 out of 59