Vulnerabilities (CVE)

Filtered by vendor Nginx Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-30503 1 Nginx 1 Njs 2022-06-10 2.1 LOW 5.5 MEDIUM
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h.
CVE-2022-29780 1 Nginx 1 Njs 2022-06-09 2.1 LOW 5.5 MEDIUM
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c.
CVE-2022-29779 1 Nginx 1 Njs 2022-06-09 2.1 LOW 5.5 MEDIUM
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c.
CVE-2020-24347 1 Nginx 1 Njs 2020-09-18 2.1 LOW 5.5 MEDIUM
njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c.
CVE-2020-24348 1 Nginx 1 Njs 2020-09-18 2.1 LOW 5.5 MEDIUM
njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c.
CVE-2019-13617 1 Nginx 1 Njs 2020-08-24 4.3 MEDIUM 6.5 MEDIUM
njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regexp_literal call that leads to an njs_parser_lexer_error call and then an njs_parser_scope_error call.