Skip to content

Technology

Nginx vulnerabilities

nginx open source and NGINX Plus. 549 published CVES affecting Nginx, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
549
Critical
82
High
248
Medium
172
Low
14
Unscored
33
CISA KEV
1
Atom feed of Nginx alerts

Latest Nginx CVEs

Newest publication first · page 15 of 22

  3. CVE-2023-28724 NGINX Management Suite vulnerability

    Published
    HighCVSS 7.1 EPSS 0.17%

    NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager. Note: Software versions which have reached End of Technical Support (EoTS) are not evalu...

  4. CVE-2023-28656 NGINX Management Suite vulnerability

    Published
    HighCVSS 8.1 EPSS 0.53%

    NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  5. CVE-2023-29004 Path Traversal Vulnerability in hap-wi/roxy-wi

    Published
    MediumCVSS 6.5 EPSS 0.90%

    hap-wi/roxy-wi is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A Path Traversal vulnerability was found in the current version of Roxy-WI (6.3.9.0 at the moment of writing this report). The vulnerability can be exploited via an HTTP request to /app/...

  12. CVE-2023-1550 NGINX Agent vulnerability CVE-2023-1550

    Published
    MediumCVSS 5.5 EPSS 0.22%

    Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive information into a log file. An authenticated attacker with local access to read agent log files may gain access to private keys. This issue is o...

  14. CVE-2023-25804 Roxy-WI vulnerable to Limited Path Traversal in name parameter

    Published
    MediumCVSS 5.3 EPSS 0.76%

    Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a limited path traversal vulnerability. An SSH key can be saved into an unintended location, for example the /tmp folder using a payload ../../../../../tmp/test1...

  15. CVE-2023-25802 Roxy-WI has Path Traversal vulnerability

    Published
    HighCVSS 7.5 EPSS 1.0%

    Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don't correctly neutralize dir/../filename sequences, such as /etc/nginx/../passwd, allowing an actor to gain information about a server. Version 6.3.6.0 has a patch...

  16. CVE-2023-25803 Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a directory traversal vulnerability that allows the inclusion of server-side file...

    Published
    HighCVSS 7.5 EPSS 1.2%

    Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a directory traversal vulnerability that allows the inclusion of server-side files. This issue is fixed in version 6.3.5.0.

  18. CVE-2023-24814 Persisted Cross-Site Scripting in Frontend Rendering in typo3

    Published
    MediumCVSS 6.1 EPSS 0.83% PoC

    TYPO3 is a free and open source Content Management Framework released under the GNU General Public License. In affected versions the TYPO3 core component GeneralUtility::getIndpEnv() uses the unfiltered server environment variable PATH_INFO, which allows attackers to inject malic...

  19. CVE-2023-23596 jc21 NGINX Proxy Manager through 2.9.19 allows OS command injection. When creating an access list, the backend builds an htpasswd file with crafted username and/or password input that is concatenated....

    Published
    HighCVSS 8.8 EPSS 15.6%

    jc21 NGINX Proxy Manager through 2.9.19 allows OS command injection. When creating an access list, the backend builds an htpasswd file with crafted username and/or password input that is concatenated without any validation, and is directly passed to the exec command, potentially...

  20. CVE-2020-36647 YunoHost-Apps transmission_ynh nginx.conf path traversal

    Published
    MediumCVSS 5.3 EPSS 0.74%

    A vulnerability classified as critical has been found in YunoHost-Apps transmission_ynh. Affected is an unknown function of the file conf/nginx.conf. The manipulation leads to path traversal. The patch is identified as f136dfd44eda128129e5fd2d850a3a3c600e6a4a. It is recommended t...

  21. CVE-2022-23470 Arbitrary file access in the Galaxy data analysis platform

    Published
    HighCVSS 7.5 EPSS 0.88%

    Galaxy is an open-source platform for data analysis. An arbitrary file read exists in Galaxy 22.01 and Galaxy 22.05 due to the switch to Gunicorn, which can be used to read any file accessible to the operating system user under which Galaxy is running. This vulnerability affects...

  25. CVE-2022-41743 NGINX ngx_http_hls_module vulnerability CVE-2022-41743

    Published
    HighCVSS 7.0 EPSS 0.23%

    NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_hls_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its crash or potential other impact using a specially crafted audio or video file. The issue affects...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.