Session forgery when using TLS session tickets ほか 4 件
AI 複数の脆弱性（バッファオーバーフロー、リクエストボディインジェクション、use-after-free、セッション偽造）が報告されており、1.31.7 または 1.30.6 以降への更新で対応できる。 修正版 1.31.7、1.30.6 固定リンク | 2026-10-15 | medium | CVE-2026-97629, CVE-2026-97205, CVE-2026-95101 ほか 2 件 |
|
Buffer overflow when using ngx_http_v3_module CVE-2026-90439 | — | medium | CVE-2026-90439 |
|
Memory disclosure when using ngx_http_slice_module CVE-2026-60005 | — | medium | CVE-2026-60005 |
|
Use-after-free when using ngx_http_ssi_module CVE-2026-56434 | — | medium | CVE-2026-56434 |
|
Buffer overread in the ngx_http_charset_module CVE-2026-48142 | — | low | CVE-2026-48142 |
|
Buffer overread in the ngx_http_scgi_module and ngx_http_uwsgi_module CVE-2026-42946 | — | medium | CVE-2026-42946 |
|
Buffer overflow in the ngx_http_rewrite_module CVE-2026-42945 | — | medium | CVE-2026-42945 |
|
Buffer overread in the ngx_http_charset_module CVE-2026-42934 | — | low | CVE-2026-42934 |
|
HTTP/2 request injection in the ngx_http_proxy_module CVE-2026-42926 | — | medium | CVE-2026-42926 |
|
Buffer overflow when using map and regex CVE-2026-42533 | — | major | CVE-2026-42533 |
|
Use-after-free in HTTP/3 CVE-2026-42530 | — | major | CVE-2026-42530 |
|
Buffer overflow in the ngx_http_proxy_v2_module and ngx_http_grpc_module CVE-2026-42055 | — | medium | CVE-2026-42055 |
|
resolver use-after-free in OCSP CVE-2026-40701 | — | medium | CVE-2026-40701 |
|
HTTP/3 address spoofing CVE-2026-40460 | — | medium | CVE-2026-40460 |
|
Buffer overflow in the ngx_http_mp4_module CVE-2026-32647 | — | medium | CVE-2026-32647 |
|
OCSP result bypass in stream CVE-2026-28755 | — | medium | CVE-2026-28755 |
|
Injection in auth_http and XCLIENT CVE-2026-28753 | — | medium | CVE-2026-28753 |
|
Buffer overflow in the ngx_http_mp4_module CVE-2026-27784 | — | medium | CVE-2026-27784 |
|
Buffer overflow in ngx_http_dav_module CVE-2026-27654 | — | medium | CVE-2026-27654 |
|
NULL pointer dereference while using CRAM-MD5 or APOP CVE-2026-27651 | — | low | CVE-2026-27651 |
|
Buffer overflow in the ngx_http_rewrite_module CVE-2026-9256 | — | medium | CVE-2026-9256 |
|
SSL upstream injection CVE-2026-1642 | — | medium | CVE-2026-1642 |
|
Buffer overread in the ngx_mail_smtp_module CVE-2025-53859 | — | low | CVE-2025-53859 |
|
SSL session reuse vulnerability CVE-2025-23419 | — | medium | CVE-2025-23419 |
|
NULL pointer dereference in HTTP/3 CVE-2024-35200 | — | medium | CVE-2024-35200 |
|
Memory disclosure in HTTP/3 CVE-2024-34161 | — | medium | CVE-2024-34161 |
|
Buffer overwrite in HTTP/3 CVE-2024-32760 | — | medium | CVE-2024-32760 |
|
Stack overflow and use-after-free in HTTP/3 CVE-2024-31079 | — | medium | CVE-2024-31079 |
|
Use-after-free in HTTP/3 CVE-2024-24990 | — | major | CVE-2024-24990 |
|
NULL pointer dereference in HTTP/3 CVE-2024-24989 | — | major | CVE-2024-24989 |
|
Buffer overread in the ngx_http_mp4_module CVE-2024-7347 | — | low | CVE-2024-7347 |
|
Memory disclosure in the ngx_http_mp4_module CVE-2022-41742 | — | medium | CVE-2022-41742 |
|
Memory corruption in the ngx_http_mp4_module CVE-2022-41741 | — | medium | CVE-2022-41741 |
|
1-byte memory overwrite in resolver CVE-2021-23017 | — | medium | CVE-2021-23017 |
|
Excessive memory usage in HTTP/2 with zero length headers CVE-2019-9516 | — | low | CVE-2019-9516 |
|
Excessive CPU usage in HTTP/2 with priority changes CVE-2019-9513 | — | low | CVE-2019-9513 |
|
Excessive CPU usage in HTTP/2 with small window updates CVE-2019-9511 | — | medium | CVE-2019-9511 |
|
Memory disclosure in the ngx_http_mp4_module CVE-2018-16845 | — | medium | CVE-2018-16845 |
|
Excessive CPU usage in HTTP/2 CVE-2018-16844 | — | low | CVE-2018-16844 |
|
Excessive memory usage in HTTP/2 CVE-2018-16843 | — | low | CVE-2018-16843 |
|
Integer overflow in the range filter CVE-2017-7529 | — | medium | CVE-2017-7529 |
|
NULL pointer dereference while writing client request body CVE-2016-4450 | — | medium | CVE-2016-4450 |
|
Insufficient limits of CNAME resolution in resolver CVE-2016-0747 | — | medium | CVE-2016-0747 |
|
Use-after-free during CNAME response processing in resolver CVE-2016-0746 | — | medium | CVE-2016-0746 |
|
Invalid pointer dereference in resolver CVE-2016-0742 | — | medium | CVE-2016-0742 |
|
SSL session reuse vulnerability CVE-2014-3616 | — | medium | CVE-2014-3616 |
|
STARTTLS command injection CVE-2014-3556 | — | medium | CVE-2014-3556 |
|
SPDY heap buffer overflow CVE-2014-0133 | — | major | CVE-2014-0133 |
|
SPDY memory corruption CVE-2014-0088 | — | major | CVE-2014-0088 |
|
Request line parsing vulnerability CVE-2013-4547 | — | medium | CVE-2013-4547 |
|
Memory disclosure with specially crafted HTTP backend responses CVE-2013-2070 | — | medium | CVE-2013-2070 |
|
Stack-based buffer overflow with specially crafted request CVE-2013-2028 | — | major | CVE-2013-2028 |
|
Buffer overflow in the ngx_http_mp4_module CVE-2012-2089 | — | major | CVE-2012-2089 |
|
Memory disclosure with specially crafted backend responses CVE-2012-1180 | — | major | CVE-2012-1180 |
|
Vulnerabilities with Windows directory aliases CVE-2011-4963 | — | medium | CVE-2011-4963 |
|
Buffer overflow in resolver CVE-2011-4315 | — | medium | CVE-2011-4315 |
|
Vulnerabilities with invalid UTF-8 sequence on Windows CVE-2010-2266 | — | major | CVE-2010-2266 |
|
Vulnerabilities with Windows file default stream CVE-2010-2263 | — | major | CVE-2010-2263 |
|
An error log data are not sanitized CVE-2009-4487 | — | none | CVE-2009-4487 |
|
Directory traversal vulnerability CVE-2009-3898 | — | minor | CVE-2009-3898 |
|
Null pointer dereference vulnerability CVE-2009-3896 | — | major | CVE-2009-3896 |
|
The renegotiation vulnerability in SSL protocol CVE-2009-3555 | — | major | CVE-2009-3555 |
|
Buffer underflow vulnerability CVE-2009-2629 | — | major | CVE-2009-2629 |