Feed live

nginx CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,287

All time

Critical · Active

11,999

CVSS ≥ 9.0

New · 14 days

2,733

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 91–110 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-5044	high	7.6/10	Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation	Oct 25, 2023 2y ago
CVE-2023-5043	high	7.6/10	Ingress nginx annotation injection causes arbitrary command execution	Oct 25, 2023 2y ago
CVE-2022-4886	high	8.8/10	Ingress-nginx `path` sanitization can be bypassed with `log_format` directive	Oct 25, 2023 2y ago
CVE-2023-4335	—	—	Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux	Aug 15, 2023 3y ago
CVE-2023-4334	—	—	Broadcom RAID Controller Web server (nginx) is serving private files without any authentication	Aug 15, 2023 3y ago
CVE-2021-25748	high	7.6/10	Ingress-nginx `path` sanitization can be bypassed with newline character	May 24, 2023 3y ago
CVE-2023-28724	high	7.1/10	NGINX Management Suite vulnerability	May 3, 2023 3y ago
CVE-2023-28656	high	8.1/10	NGINX Management Suite vulnerability	May 3, 2023 3y ago
CVE-2023-1550	medium	5.5/10	NGINX Agent vulnerability CVE-2023-1550	Mar 29, 2023 3y ago
CVE-2020-36647	medium	5.5/10	YunoHost-Apps transmission_ynh nginx.conf path traversal	Jan 8, 2023 3y ago
CVE-2022-41743	high	7.0/10	NGINX ngx_http_hls_module vulnerability CVE-2022-41743	Oct 19, 2022 3y ago
CVE-2022-41742	high	7.1/10	NGINX ngx_http_mp4_module vulnerability CVE-2022-41742	Oct 19, 2022 3y ago
CVE-2022-41741	high	7.0/10	NGINX ngx_http_mp4_module vulnerability CVE-2022-41741	Oct 19, 2022 3y ago
CVE-2022-35241	medium	6.5/10	NGINX Instance Manager vulnerability CVE-2022-35241	Aug 4, 2022 4y ago
CVE-2022-30535	medium	6.5/10	NGINX Ingress Controller vulnerability CVE-2022-30535	Aug 4, 2022 4y ago
CVE-2021-25746	high	7.6/10	Ingress-nginx directive injection via annotations	May 6, 2022 4y ago
CVE-2021-25745	high	7.6/10	Ingress-nginx path can be pointed to service account token file	May 6, 2022 4y ago
CVE-2021-25742	high	7.6/10	Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces	Oct 29, 2021 4y ago
CVE-2020-5416	high	7.7/10	CF clusters with NGINX in front of them may be vulnerable to DoS	Aug 21, 2020 6y ago
CVE-2020-8553	medium	5.9/10	Kubernetes ingress-nginx Compromise of auth via subset/superset namespace names	Jul 29, 2020 6y ago