Feed live

nginx CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,287

All time

Critical · Active

11,999

CVSS ≥ 9.0

New · 14 days

2,733

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 61–90 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-6213	high	7.2/10	Nginx Cache Purge Preload <= 2.1.1 - Authenticated (Administrator+) Remote Code Execution	Jul 22, 2025 1y ago
CVE-2025-2787	high	8.7/10	Ingress-nginx vulnerability in KNIME Business Hub	Mar 26, 2025 1y ago
CVE-2025-24514	high	8.8/10	ingress-nginx controller - configuration injection via unsanitized auth-url annotation	Mar 24, 2025 1y ago
CVE-2025-24513	medium	4.8/10	ingress-nginx controller - auth secret file path traversal vulnerability	Mar 24, 2025 1y ago
CVE-2025-1098	high	8.8/10	ingress-nginx controller - configuration injection via unsanitized mirror annotations	Mar 24, 2025 1y ago
CVE-2025-1097	high	8.8/10	ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation	Mar 24, 2025 1y ago
CVE-2025-1695	medium	5.3/10	NGINX Unit Java Vulnerability	Mar 4, 2025 1y ago
CVE-2025-23776	medium	4.3/10	WordPress Cache Sniper for Nginx plugin <= 1.0.4.2 - Broken Access Control vulnerability	Jan 16, 2025 1y ago
CVE-2024-56236	medium	4.3/10	WordPress Hestia Nginx Cache plugin <= 2.4.0 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-53991	high	7.5/10	Potential Backup file leaked via Nginx in Discourse	Dec 19, 2024 1y ago
CVE-2024-10318	medium	5.4/10	NGINX OpenID Connect Vulnerability	Nov 6, 2024 1y ago
CVE-2024-49367	medium	5.5/10	Nginx UI's log path can be controlled	Oct 21, 2024 1y ago
CVE-2024-49366	high	7.7/10	Nginx UI's json field can construct a directory traversal payload, causing arbitrary files to be written	Oct 21, 2024 1y ago
CVE-2024-7634	medium	4.9/10	NGINX Agent Vulnerability	Aug 22, 2024 2y ago
CVE-2024-7347	medium	4.7/10	NGINX MP4 module vulnerability	Aug 14, 2024 2y ago
CVE-2024-39792	high	7.5/10	NGINX Plus MQTT vulnerability	Aug 14, 2024 2y ago
CVE-2024-35200	medium	5.3/10	NGINX HTTP/3 QUIC vulnerability	May 29, 2024 2y ago
CVE-2024-34161	medium	5.3/10	NGINX HTTP/3 QUIC vulnerability	May 29, 2024 2y ago
CVE-2024-32760	medium	6.5/10	NGINX HTTP/3 QUIC vulnerability	May 29, 2024 2y ago
CVE-2024-31079	medium	4.8/10	NGINX HTTP/3 QUIC vulnerability	May 29, 2024 2y ago
CVE-2024-3740	medium	6.3/10	cym1102 nginxWebUI reload exec deserialization	Apr 13, 2024 2y ago
CVE-2024-3739	medium	6.3/10	cym1102 nginxWebUI upload os command injection	Apr 13, 2024 2y ago
CVE-2024-3738	high	7.3/10	cym1102 nginxWebUI saveCmd handlePath certificate validation	Apr 13, 2024 2y ago
CVE-2024-3737	medium	6.3/10	cym1102 nginxWebUI addOver findCountByQuery path traversal	Apr 13, 2024 2y ago
CVE-2024-3736	medium	4.3/10	cym1102 nginxWebUI upload unrestricted upload	Apr 13, 2024 2y ago
CVE-2024-24990	high	7.5/10	NGINX HTTP/3 QUIC vulnerability	Feb 14, 2024 2y ago
CVE-2024-24989	high	7.5/10	NGINX HTTP/3 QUIC vulnerability	Feb 14, 2024 2y ago
CVE-2024-23828	high	8.8/10	Nginx-UI authenticated RCE through injecting into the application config via CRLF	Jan 29, 2024 2y ago
CVE-2024-23827	critical	9.8/10	Nginx-UI arbitrary file write through the Import Certificate feature	Jan 29, 2024 2y ago
CVE-2024-22197	high	7.7/10	Authenticated (user role) remote command execution by modifying `nginx` settings (GHSL-2023-269)	Jan 11, 2024 2y ago