Known vulnerabilities in nginx - page 2
Vendor:
Fedoraproject
Software:
nginx
Software CPE:
cpe:2.3:o:fedoraproject:nginx:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
47
Public exploits:
7
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.30.4-1.fc45
1.30.3-1.fc43
1.30.3-1.fc44
1.30.3-1.fc45
1.30.2-2.fc45
1.30.2-1.fc43
1.30.2-1.fc44
1.30.1-1.fc42
1.30.1-1.fc43
1.30.1-1.fc44
1.28.3-1.fc44
1.28.2-1.fc42
1.28.2-1.fc43
1.16.1-2.el7
1.16.1-1.el7
1.16.1-1.fc29
mainline-3020190816153353.a5b0195c
mainline-2920190816153353.6c81f848
1.16.1-1.fc30
1.14.1-1.fc27
1.14.1-1.fc28
1.14.1-2.fc29
1.12.2-1.el7
1.12.1-1.fc26
1.12.1-1.fc25
1.10.1-1.el5
1.10.1-1.el6
1.6.3-9.el7
1.8.1-3.fc23
1.8.1-2.fc23
1.10.1-1.fc24
1.6.3-8.el7
1.8.1-1.fc22
1.8.1-1.fc23
0.8.55-6.el5
1.0.15-11.el6
1.0.15-10.el6
1.6.2-2.fc21
1.0.15-8.el6
1.6.2-1.el7
0.8.55-3.el5
1.0.15-4.el6
0.8.55-1.el5
1.26.3-1.fc40
1.26.3-1.fc41
1.26.3-1.fc42
1.20-3620221110171337.5e5ad4a0
1.20-3520221110171337.f27b74a8
1.20-3720221110171337.9e842022
1.20.1-10.el7
mainline-3720221019155610.9e842022
mainline-820220816123924.9edba152
mainline-3520221019155610.f27b74a8
mainline-3620221019155610.5e5ad4a0
1.22.1-1.fc37
1.22.1-1.fc35
1.22.1-1.fc36
1.20-3320210625014643.601d93de
1.20.1-3.fc34
1.20.1-3.fc33
1.20.1-2.fc34
1.20.1-2.el7
1.20.1-2.fc33
1.20.1-1.el7
1.20.1-1.fc34
1.20.1-1.fc33
1.20.0-2.fc32
1.20.0-2.fc34
1.20.0-2.fc33
1.26.2-1.fc39
1.26.2-1.fc40
mainline-3820240218193500.f38
1.0.15-1.el6
0.8.55-2.el5
1.0.14-1.el6
0.6.39-2.el5
0.6.39-1.el5
Vulnerabilities (47)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU103686 - Improper Authentication CVE-2025-23419 |
CWE-287 | Low | 1.26.3-1.fc40, 1.26.3-1.fc41, 1.26.3-1.fc42 | 06.02.2025 |
SB2025020653 SB2025020670 SB2025020671 and 17 more |
||
| #VU96020 - Out-of-bounds read CVE-2024-7347 |
CWE-125 | Medium | 1.26.2-1.fc39, 1.26.2-1.fc40 | 14.08.2024 |
SB2024081481 SB2024081706 SB2024081707 and 25 more |
||
| #VU86558 - NULL Pointer Dereference CVE-2024-24989 |
CWE-476 | Medium | mainline-3820240218193500.f38 | 16.02.2024 |
SB2024021636 SB2024022701 SB2024092806 and 1 more |
||
| #VU86557 - Use After Free CVE-2024-24990 |
CWE-416 | Medium | mainline-3820240218193500.f38 | 16.02.2024 |
SB2024021636 SB2024022701 SB2024092806 and 1 more |
||
| #VU68495 - Out-of-bounds read CVE-2022-41742 |
CWE-125 | Medium | mainline-820220816123924.9edba152, mainline-3520221019155610.f27b74a8, mainline-3620221019155610.5e5ad4a0, mainline-3720221019155610.9e842022, 1.20.1-10.el7, 1.20-3520221110171337.f27b74a8, 1.20-3620221110171337.5e5ad4a0, 1.20-3720221110171337.9e842022, 1.22.1-1.fc35, 1.22.1-1.fc36, 1.22.1-1.fc37 | 19.10.2022 |
SB2022101941 SB2022111503 SB2022111601 and 34 more |
||
| #VU68494 - Out-of-bounds read CVE-2022-41741 |
CWE-125 | Medium | mainline-820220816123924.9edba152, mainline-3520221019155610.f27b74a8, mainline-3620221019155610.5e5ad4a0, mainline-3720221019155610.9e842022, 1.20.1-10.el7, 1.20-3520221110171337.f27b74a8, 1.20-3620221110171337.5e5ad4a0, 1.20-3720221110171337.9e842022, 1.22.1-1.fc35, 1.22.1-1.fc36, 1.22.1-1.fc37 | 19.10.2022 |
SB2022101941 SB2022111503 SB2022111601 and 32 more |
||
| #VU59319 - Origin Validation Error CVE-2021-3618 |
CWE-346 | Medium | 1.20.1-3.fc33, 1.20.1-3.fc34, 1.20-3320210625014643.601d93de | 09.01.2022 |
SB2022010903 SB2022010904 SB2022010905 and 37 more |
||
| #VU56735 - NULL Pointer Dereference CVE-2016-0742 |
CWE-476 | Medium | 1.6.3-8.el7, 1.8.1-1.fc22, 1.8.1-1.fc23, 1.10.1-1.el5, 1.10.1-1.el6 | 21.09.2021 |
SB2016021501 SB2024080137 SB2024080138 and 7 more |
||
| #VU53543 - Off-by-one Error CVE-2021-23017 |
CWE-193 | High | 1.20.1-1.el7, 1.20.1-1.fc33, 1.20.1-1.fc34, 1.20.1-2.el7, 1.20.1-2.fc33, 1.20.1-2.fc34 | 25.05.2021 |
SB2021052543 SB2021052713 SB2021052901 and 48 more |
||
| #VU24230 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2019-20372 |
CWE-444 | Medium | 1.16.1-2.el7 | 13.01.2020 |
SB2020011323 SB2020011324 SB2020021002 and 10 more |
||
| #VU35058 - Improper input validation CVE-2011-4968 |
CWE-20 | Medium | 1.10.1-1.el5, 1.10.1-1.el6 | 19.11.2019 |
SB2016070207 SB2016070208 |
||
| #VU20198 - Resource exhaustion CVE-2019-9516 |
CWE-400 | Medium | mainline-2920190816153353.6c81f848, mainline-3020190816153353.a5b0195c, 1.16.1-1.fc29, 1.16.1-1.fc30 | 13.08.2019 |
SB2019081323 SB2019081602 SB2019081606 and 41 more |
||
| #VU20197 - Resource exhaustion CVE-2019-9513 |
CWE-400 | Medium | mainline-2920190816153353.6c81f848, mainline-3020190816153353.a5b0195c, 1.16.1-1.fc29, 1.16.1-1.fc30 | 13.08.2019 |
SB2019081323 SB2019081326 SB2019081602 and 51 more |
||
| #VU20196 - Resource exhaustion CVE-2019-9511 |
CWE-400 | Medium | mainline-2920190816153353.6c81f848, mainline-3020190816153353.a5b0195c, 1.16.1-1.fc29, 1.16.1-1.fc30 | 13.08.2019 |
SB2019081323 SB2019081326 SB2019081602 and 55 more |
||
| #VU15745 - Resource Management Errors CVE-2018-16843 |
CWE-399 | Medium | 1.14.1-1.fc27, 1.14.1-1.fc28, 1.14.1-2.fc29 | 07.11.2018 |
SB2018110703 SB2018110908 SB2018112912 and 9 more |
||
| #VU15744 - Resource Management Errors CVE-2018-16844 |
CWE-399 | Medium | 1.14.1-1.fc27, 1.14.1-1.fc28, 1.14.1-2.fc29 | 07.11.2018 |
SB2018110703 SB2018110908 SB2018112912 and 9 more |
||
| #VU15743 - Out-of-bounds read CVE-2018-16845 |
CWE-125 | Medium | 1.14.1-1.fc27, 1.14.1-1.fc28, 1.14.1-2.fc29 | 07.11.2018 |
SB2018110703 SB2018110908 SB2018112912 and 11 more |
||
| #VU7410 - Integer overflow CVE-2017-7529 |
CWE-190 | Medium | 1.12.1-1.fc25, 1.12.1-1.fc26, 1.12.2-1.el7 | 11.07.2017 |
SB2017071109 SB2017071214 SB2017071305 and 12 more |
||
| #VU1082 - Permissions, Privileges, and Access Controls CVE-2016-1247 |
CWE-264 | Low | 1.20.0-2.fc32, 1.20.0-2.fc33, 1.20.0-2.fc34, 1.20.1-1.el7, 1.20.1-2.el7 | 26.10.2016 |
SB2017011106 SB2017011501 SB2017011502 and 10 more |
||
| #VU25 - Inclusion of Functionality from Untrusted Control Sphere CVE-2016-4450 |
CWE-829 | Medium | 1.6.3-9.el7, 1.8.1-2.fc23, 1.8.1-3.fc23, 1.10.1-1.el5, 1.10.1-1.el6, 1.10.1-1.fc24 | 24.06.2016 |
SB2016053101 SB2016060202 SB2016060102 and 14 more |
Showing elements 21 - 40 out of 47