nginx

46 results · Feed

• High 7.5
  CVE-2019-9511 Public exploit EPSS 60%

  Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service

  Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manip…

  nodejs nodejs nodejs nginx Debian Ubuntu Alpine
  Aug 13, 2019
• High 7.5
  CVE-2019-9516 EPSS 57%

  Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service

  Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. S…

  nodejs nginx nginx nginx Debian Ubuntu Alpine
  Aug 13, 2019
• High 8.2
  CVE-2018-16845

  nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to c…

  [UNKNOWN] nginx nginx nginx Debian Ubuntu Alpine
  Nov 7, 2018
• Medium 5.3
  CVE-2018-16843 Public exploit EPSS 48%

  nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessiv…

  [UNKNOWN] nginx nginx nginx Debian Ubuntu Alpine
  Nov 7, 2018
• Medium 5.3
  CVE-2018-16844 EPSS 13%

  nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessiv…

  [UNKNOWN] nginx nginx nginx Debian Ubuntu Alpine
  Nov 7, 2018
• Unscored —
  CVE-2017-7529 Public exploit EPSS 63%

  Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range f…

  nginx nginx nginx nginx Debian Ubuntu Alpine
  Jul 13, 2017