Nginx Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Web Server50

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Nginx NJS20
Nginx Controller18
Nginx njs6
Nginx Open Source4
Nginx Plus4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Remediation

Official Fix30
Temporary Fix0
Workaround0
Unavailable0
Not Defined20

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploitability

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined50

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Access Vector

Not Defined0
Physical0
Local2
Adjacent30
Network18

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Authentication

Not Defined0
High0
Low36
None14

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

User Interaction

Not Defined0
Required4
None46

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

C3BM Index

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Base

≤10
≤20
≤32
≤42
≤50
≤618
≤720
≤86
≤92
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Temp

≤10
≤20
≤34
≤40
≤50
≤618
≤720
≤86
≤92
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

VulDB

≤10
≤20
≤32
≤44
≤52
≤632
≤74
≤86
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤816
≤96
≤106

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit 0-day

<1k8
<2k20
<5k22
<10k0
<25k0
<50k0
<100k0
≥100k0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Today

<1k38
<2k12
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Market Volume

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

🔴 CTI Activities

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Affected Products (8): Controller (17), Ingress Controller (1), NJS (22), Open Source (3), Open Source Subscription (2), Plus (4), Unit (1), njs (6)

PublishedBaseTempVulnerabilityProdExpRemEPSSCTICVE
04/10/20235.55.5Nginx NJS njs_lvlhsh.c njs_lvlhsh_find memory corruptionWeb ServerNot DefinedNot Defined0.000550.03CVE-2023-27730
04/10/20236.56.5Nginx NJS njs_vmcode.c njs_vmcode_return memory corruptionWeb ServerNot DefinedNot Defined0.000930.05CVE-2023-27729
04/10/20236.56.5Nginx NJS njs_vmcode.c njs_dump_is_recursive memory corruptionWeb ServerNot DefinedNot Defined0.000550.00CVE-2023-27728
04/10/20236.56.5Nginx NJS njs_function.h njs_function_frame memory corruptionWeb ServerNot DefinedNot Defined0.000550.04CVE-2023-27727
04/04/20238.08.0Nginx njs njs_vm.c buffer overflowWeb ServerNot DefinedNot Defined0.003880.00CVE-2020-19695
04/04/20238.08.0Nginx njs njs_module.c njs_module_read buffer overflowWeb ServerNot DefinedNot Defined0.005490.00CVE-2020-19692
10/29/20225.55.3Nginx NJS njs_json.c njs_json_parse_iterator_call use after freeWeb ServerNot DefinedOfficial Fix0.001720.00CVE-2022-43286
10/29/20226.56.5Nginx NJS njs_promise_reaction_job memory corruptionWeb ServerNot DefinedNot Defined0.000700.00CVE-2022-43285
10/29/20226.56.5Nginx NJS njs_scope.h njs_scope_valid_value memory corruptionWeb ServerNot DefinedNot Defined0.000730.00CVE-2022-43284
10/20/20227.97.7Nginx Plus ngx_http_hls_module out-of-bounds writeWeb ServerNot DefinedOfficial Fix0.000420.04CVE-2022-41743

40 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 40 results.

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!