Known vulnerabilities in nginx - page 2

Software: nginx
Software CPE: cpe:2.3:o:fedoraproject:nginx:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 47
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nginx nginx is affected by 47 known vulnerabilities: 2 critical, 9 high, 34 medium, 2 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103686 - Improper Authentication
CVE-2025-23419
CWE-287 Low
No
No
1.26.3-1.fc40, 1.26.3-1.fc41, 1.26.3-1.fc42 06.02.2025 SB2025020653
SB2025020670
SB2025020671
and 17 more
#VU96020 - Out-of-bounds read
CVE-2024-7347
CWE-125 Medium
No
No
1.26.2-1.fc39, 1.26.2-1.fc40 14.08.2024 SB2024081481
SB2024081706
SB2024081707
and 25 more
#VU86558 - NULL Pointer Dereference
CVE-2024-24989
CWE-476 Medium
No
No
mainline-3820240218193500.f38 16.02.2024 SB2024021636
SB2024022701
SB2024092806
and 1 more
#VU86557 - Use After Free
CVE-2024-24990
CWE-416 Medium
No
No
mainline-3820240218193500.f38 16.02.2024 SB2024021636
SB2024022701
SB2024092806
and 1 more
#VU68495 - Out-of-bounds read
CVE-2022-41742
CWE-125 Medium
No
No
mainline-820220816123924.9edba152, mainline-3520221019155610.f27b74a8, mainline-3620221019155610.5e5ad4a0, mainline-3720221019155610.9e842022, 1.20.1-10.el7, 1.20-3520221110171337.f27b74a8, 1.20-3620221110171337.5e5ad4a0, 1.20-3720221110171337.9e842022, 1.22.1-1.fc35, 1.22.1-1.fc36, 1.22.1-1.fc37 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 34 more
#VU68494 - Out-of-bounds read
CVE-2022-41741
CWE-125 Medium
No
No
mainline-820220816123924.9edba152, mainline-3520221019155610.f27b74a8, mainline-3620221019155610.5e5ad4a0, mainline-3720221019155610.9e842022, 1.20.1-10.el7, 1.20-3520221110171337.f27b74a8, 1.20-3620221110171337.5e5ad4a0, 1.20-3720221110171337.9e842022, 1.22.1-1.fc35, 1.22.1-1.fc36, 1.22.1-1.fc37 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 32 more
#VU59319 - Origin Validation Error
CVE-2021-3618
CWE-346 Medium
No
No
1.20.1-3.fc33, 1.20.1-3.fc34, 1.20-3320210625014643.601d93de 09.01.2022 SB2022010903
SB2022010904
SB2022010905
and 37 more
#VU56735 - NULL Pointer Dereference
CVE-2016-0742
CWE-476 Medium
No
No
1.6.3-8.el7, 1.8.1-1.fc22, 1.8.1-1.fc23, 1.10.1-1.el5, 1.10.1-1.el6 21.09.2021 SB2016021501
SB2024080137
SB2024080138
and 7 more
#VU53543 - Off-by-one Error
CVE-2021-23017
CWE-193 High
Available
No
1.20.1-1.el7, 1.20.1-1.fc33, 1.20.1-1.fc34, 1.20.1-2.el7, 1.20.1-2.fc33, 1.20.1-2.fc34 25.05.2021 SB2021052543
SB2021052713
SB2021052901
and 48 more
#VU24230 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20372
CWE-444 Medium
Available
No
1.16.1-2.el7 13.01.2020 SB2020011323
SB2020011324
SB2020021002
and 10 more
#VU35058 - Improper input validation
CVE-2011-4968
CWE-20 Medium
No
No
1.10.1-1.el5, 1.10.1-1.el6 19.11.2019 SB2016070207
SB2016070208
#VU20198 - Resource exhaustion
CVE-2019-9516
CWE-400 Medium
No
No
mainline-2920190816153353.6c81f848, mainline-3020190816153353.a5b0195c, 1.16.1-1.fc29, 1.16.1-1.fc30 13.08.2019 SB2019081323
SB2019081602
SB2019081606
and 41 more
#VU20197 - Resource exhaustion
CVE-2019-9513
CWE-400 Medium
No
No
mainline-2920190816153353.6c81f848, mainline-3020190816153353.a5b0195c, 1.16.1-1.fc29, 1.16.1-1.fc30 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 51 more
#VU20196 - Resource exhaustion
CVE-2019-9511
CWE-400 Medium
No
No
mainline-2920190816153353.6c81f848, mainline-3020190816153353.a5b0195c, 1.16.1-1.fc29, 1.16.1-1.fc30 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 55 more
#VU15745 - Resource Management Errors
CVE-2018-16843
CWE-399 Medium
No
No
1.14.1-1.fc27, 1.14.1-1.fc28, 1.14.1-2.fc29 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 9 more
#VU15744 - Resource Management Errors
CVE-2018-16844
CWE-399 Medium
No
No
1.14.1-1.fc27, 1.14.1-1.fc28, 1.14.1-2.fc29 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 9 more
#VU15743 - Out-of-bounds read
CVE-2018-16845
CWE-125 Medium
No
No
1.14.1-1.fc27, 1.14.1-1.fc28, 1.14.1-2.fc29 07.11.2018 SB2018110703
SB2018110908
SB2018112912
and 11 more
#VU7410 - Integer overflow
CVE-2017-7529
CWE-190 Medium
Available
No
1.12.1-1.fc25, 1.12.1-1.fc26, 1.12.2-1.el7 11.07.2017 SB2017071109
SB2017071214
SB2017071305
and 12 more
#VU1082 - Permissions, Privileges, and Access Controls
CVE-2016-1247
CWE-264 Low
Available
No
1.20.0-2.fc32, 1.20.0-2.fc33, 1.20.0-2.fc34, 1.20.1-1.el7, 1.20.1-2.el7 26.10.2016 SB2017011106
SB2017011501
SB2017011502
and 10 more
#VU25 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2016-4450
CWE-829 Medium
No
No
1.6.3-9.el7, 1.8.1-2.fc23, 1.8.1-3.fc23, 1.10.1-1.el5, 1.10.1-1.el6, 1.10.1-1.fc24 24.06.2016 SB2016053101
SB2016060202
SB2016060102
and 14 more


Showing elements 21 - 40 out of 47