Skip to content
OpenAdvisories

Package · Ubuntu

nginx

51 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

50 results · Feed

  • Medium 5.3
    CVE-2018-16843 Public exploit EPSS 48%

    nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessiv…

    [UNKNOWN] nginx nginx nginx Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2018-16844 EPSS 13%

    nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessiv…

    [UNKNOWN] nginx nginx nginx Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-7529 Public exploit EPSS 63%

    Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range f…

    nginx nginx nginx nginx Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-1247 Public exploit

    The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LT…

    nginx nginx Debian Ubuntu
  • Unscored —
    CVE-2016-4450 EPSS 16%

    os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of servic…

    nginx nginx Debian Ubuntu
  • Unscored —
    CVE-2016-0747

    The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remot…

    nginx nginx Debian Ubuntu
  • Unscored —
    CVE-2016-0746

    Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attack…

    nginx nginx Debian Ubuntu
  • Unscored —
    CVE-2016-0742 EPSS 82%

    The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invali…

    nginx nginx Debian Ubuntu
  • Unscored —
    CVE-2014-3616

    nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers,…

    nginx nginx Debian Ubuntu
  • Unscored —
    CVE-2013-0337

    The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log…

    nginx nginx Debian Ubuntu