Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

f5 nginx vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2009-3898

Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) prior to 0.7.63, and 0.8.x prior to 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDA...
Nginx Nginx 0.6.1516F5 Nginx 0.1.0F5 Nginx 0.1.1F5 Nginx 0.1.8F5 Nginx 0.1.9F5 Nginx 0.1.6F5 Nginx 0.1.7F5 Nginx 0.1.4F5 Nginx 0.1.5F5 Nginx 0.1.2F5 Nginx 0.1.3F5 Nginx 0.1.16F5 Nginx 0.1.17F5 Nginx 0.1.14F5 Nginx 0.1.15F5 Nginx 0.1.12F5 Nginx 0.1.13F5 Nginx 0.1.10F5 Nginx 0.1.11F5 Nginx 0.1.24F5 Nginx 0.1.25F5 Nginx 0.1.22
NA

CVE-2009-3896

src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 up to and including 0.4.14, 0.5.x prior to 0.5.38, 0.6.x prior to 0.6.39, 0.7.x prior to 0.7.62, and 0.8.x prior to 0.8.14 allows remote malicious users to cause a denial of service (NULL pointer dereference and worker proce...
Nginx Nginx 0.6.1516F5 Nginx 0.1.0F5 Nginx 0.1.1F5 Nginx 0.1.8F5 Nginx 0.1.9F5 Nginx 0.1.6F5 Nginx 0.1.7F5 Nginx 0.1.4F5 Nginx 0.1.5F5 Nginx 0.1.2F5 Nginx 0.1.3F5 Nginx 0.1.16F5 Nginx 0.1.17F5 Nginx 0.1.14F5 Nginx 0.1.15F5 Nginx 0.1.12F5 Nginx 0.1.13F5 Nginx 0.1.10F5 Nginx 0.1.11F5 Nginx 0.1.24F5 Nginx 0.1.25F5 Nginx 0.1.22
NA

CVE-2013-0337

The default configuration of nginx, possibly 1.3.13 and previous versions, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.
F5 Nginx 1.0.11F5 Nginx 1.0.12F5 Nginx 1.0.13F5 Nginx 1.0.14F5 Nginx 1.0.0F5 Nginx 1.0.1F5 Nginx 1.0.10F5 Nginx 1.0.5F5 Nginx 1.0.6F5 Nginx 1.0.7F5 Nginx 1.0.8F5 Nginx 1.0.15F5 Nginx 1.0.2F5 Nginx 1.0.3F5 Nginx 1.0.4F5 Nginx 1.1.11F5 Nginx 1.1.12F5 Nginx 1.1.13F5 Nginx 1.0.9F5 Nginx 1.1.0F5 Nginx 1.1.1F5 Nginx 1.1.10
4.8
CVSSv3

CVE-2011-4968

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
F5 Nginx 0.7.65F5 Nginx 0.7.66F5 Nginx 0.7.64F5 Nginx 0.7.61F5 Nginx 0.7.62F5 Nginx 0.8.33F5 Nginx 0.8.40F5 Nginx 0.8.35F5 Nginx 0.8.36F5 Nginx 1.2.6Debian Debian Linux 8.0
4.7
CVSSv3

CVE-2024-7347

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an malicious user to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_m...
F5 Nginx Plus R31F5 Nginx Plus R32F5 Nginx Open SourceF5 Nginx Plus
7.5
CVSSv3

CVE-2024-39792

When the NGINX Plus is configured to use the MQTT pre-read module, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
F5 Nginx Plus R30F5 Nginx Plus R31F5 Nginx Plus R32
7.8
CVSSv3

CVE-2022-41741

NGINX Open Source prior to 1.23.2 and 1.22.1, NGINX Open Source Subscription prior to R2 P1 and R1 P1, and NGINX Plus prior to R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local malicious user to corrupt NGINX worker memory, resultin...
F5 Nginx Ingress ControllerF5 NginxF5 Nginx 1.23.1F5 Nginx 1.23.0F5 Nginx R2F5 Nginx R1Fedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Debian Debian Linux 10.0Debian Debian Linux 11.0
7.1
CVSSv3

CVE-2022-41742

NGINX Open Source prior to 1.23.2 and 1.22.1, NGINX Open Source Subscription prior to R2 P1 and R1 P1, and NGINX Plus prior to R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local malicious user to cause a worker process crash, or migh...
F5 Nginx Ingress ControllerF5 NginxF5 Nginx 1.23.1F5 Nginx 1.23.0F5 Nginx R2F5 Nginx R1Fedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Debian Debian Linux 10.0Debian Debian Linux 11.0
NA

CVE-2011-4963

nginx/Windows 1.3.x prior to 1.3.1 and 1.2.x prior to 1.2.1 allows remote malicious users to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
F5 NginxF5 Nginx 1.3.0
8.1
CVSSv3

CVE-2023-28656

NGINX Management Suite may allow an authenticated malicious user to gain access to configuration objects outside of their assigned environment. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
F5 Nginx Instance ManagerF5 Nginx Security MonitoringF5 Nginx Api Connectivity Manager
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
file inclusionprivilegeinsecure direct object referenceCVE-2024-37404CVE-2024-9466CVE-2024-30118CVE-2024-47668CVE-2024-43573CVE-2024-45144
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook