Let's Encrypt ist eine gemeinnützige Zertifizierungsstelle. Mit Unterstützung von Mozilla, der Bürgerrechtsorganisation Electronic Frontier Foundation (EFF) und einigen Unternehmen wie z.B. Content-Delivery-Netzwerk-Anbieter Akamai und Cisco soll so jeder kostenlos ein TLS-Zertifikat erhalten können, um die Verbindungen zu eigenen Webseiten per HTTPS verschlüsseln zu können.
-
CVE-2022-35173
Latest security vulnerabilities Nginx products Aug 18, 2022 | 00:00 amAn issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation. (CVSS:0.0) (Last Update:2022-08-24)
Read more... -
CVE-2022-29779
Latest security vulnerabilities Nginx products Jun 2, 2022 | 00:00 amNginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c. (CVSS:2.1) (Last Update:2022-06-09)
Read more... -
CVE-2022-29780
Latest security vulnerabilities Nginx products Jun 2, 2022 | 00:00 amNginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c. (CVSS:2.1) (Last Update:2022-06-09)
Read more... -
CVE-2022-30503
Latest security vulnerabilities Nginx products Jun 2, 2022 | 00:00 amNginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h. (CVSS:2.1) (Last Update:2022-06-10)
Read more... -
CVE-2021-46461
Latest security vulnerabilities Nginx products Feb 14, 2022 | 00:00 amnjs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c. (CVSS:7.5) (Last Update:2022-05-11)
Read more... -
CVE-2019-7401
Latest security vulnerabilities Nginx products Feb 8, 2019 | 00:00 amNGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request. This may result in a denial of service (router process crash) or possibly have unspecified other impact.[…]
Read more... -
CVE-2009-3896
Latest security vulnerabilities Nginx products Nov 24, 2009 | 00:00 amsrc/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a[…]
Read more... -
CVE-2009-3898
Latest security vulnerabilities Nginx products Nov 24, 2009 | 00:00 amDirectory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1)[…]
Read more...