Skip to content
Fencer Vulns

All · nginx

Newest first. Every view here is also a feed.

  1. 7.5
    CVE-2014-0088 The SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11, when running on a 32-bit platform, allows remote…
    nginx
    EPSS 8.9% chance of exploitation in 30 days, percentile 95%
  2. 7.5
    CVE-2014-0133 Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.5.x before 1.5.12 allows remote attackers to execu…
    nginx
    EPSS 9.5% chance of exploitation in 30 days, percentile 95%
  3. 7.5
    CVE-2013-4547 nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character…
    nginx
    1 public exploit EPSS 67.7% chance of exploitation in 30 days, percentile 99.3%
  4. 7.5
    CVE-2013-0337 The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log f…
    nginx
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  5. 5.8
    CVE-2013-2070 http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP serv…
    nginx
    EPSS 11.9% chance of exploitation in 30 days, percentile 96%
  6. 7.5
    CVE-2013-2028 The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of serv…
    nginx
    5 public exploits EPSS 87.5% chance of exploitation in 30 days, percentile 99.7%
  7. 5.0
    CVE-2011-4963 nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricte…
    nginx
    EPSS 6.0% chance of exploitation in 30 days, percentile 93%
  8. 6.8
    CVE-2012-2089 Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the…
    nginx
    EPSS 9.8% chance of exploitation in 30 days, percentile 95%
  9. 5.0
    CVE-2012-1180 Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from…
    nginx
    EPSS 10.6% chance of exploitation in 30 days, percentile 95%
  10. 6.8
    CVE-2011-4315 Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause…
    nginx
    EPSS 6.0% chance of exploitation in 30 days, percentile 93%
  11. 4.3
    CVE-2010-4180 OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modifica…
    nginxOpenSSL
    EPSS 9.5% chance of exploitation in 30 days, percentile 95%
  12. 5.0
    CVE-2010-2266 nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger me…
    nginx
    1 public exploit EPSS 21.5% chance of exploitation in 30 days, percentile 97%
  13. 5.0
    CVE-2010-2263 nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content o…
    nginx
    3 public exploits EPSS 71.9% chance of exploitation in 30 days, percentile 99.4%
  14. 6.8
    CVE-2009-4487 nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's…
    nginx
    1 public exploit EPSS 26.8% chance of exploitation in 30 days, percentile 98%
  15. 4.9
    CVE-2009-3898 Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17,…
    nginx
    1 public exploit EPSS 15.9% chance of exploitation in 30 days, percentile 96%
  16. 5.0
    CVE-2009-3896 src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and…
    nginx
    EPSS 10.2% chance of exploitation in 30 days, percentile 95%
  17. 9.8
    CVE-2009-3555 Apache Tomcat affected by vulnerability in TLS and SSL protocol
    nginxApache HTTP ServerOpenSSLmaven
    2 public exploits EPSS 87.3% chance of exploitation in 30 days, percentile 99.7%
  18. 7.5
    CVE-2009-2629 Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8…
    nginx
    1 public exploit EPSS 75.1% chance of exploitation in 30 days, percentile 99.5%