Most recent entries from all

bdu:2024-01328

2026-10-03T20:23:45.676016+00:00

bdu:2024-01328

Withdrawn: BELL-CVE-2024-24990 — CVE-2024-24990 does not affect BellSoft software

2026-10-03T20:23:45.676066+00:00

Withdrawn by the publisher.

BIT-nginx-2024-24990 — NGINX HTTP/3 QUIC vulnerability

2026-10-03T20:23:45.676093+00:00

Affected: Bitnami: nginx

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.

Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html .

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

certfr-2024-avi-0133 — De multiples vulnérabilités ont été découvertes dans Nginx. Elles permettent à un attaquant…

2026-10-03T20:23:45.676144+00:00

certfr-2024-avi-0133

EUVD-2026-238439

2026-10-03T20:23:45.676170+00:00

EUVD-2026-238439

fkie_cve-2024-24990

2026-10-03T20:23:45.676189+00:00

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.

Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html .

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

GHSA-38gr-cjjp-3f5w

2026-10-03T20:23:45.676233+00:00

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.

Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html .

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

gsd-2024-24990

2026-10-03T20:23:45.676266+00:00

gsd-2024-24990

ICSA-25-226-17 — Siemens SINEC Traffic Analyzer

2026-10-03T20:23:45.676284+00:00

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.

Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html .

NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.

Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3 https://nginx.org/en/docs/quic.html .

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated The affected application runs docker containers without adequate resource and security limitations. This could allow an attacker to perform a denial-of-service (DoS) attack. The affected application runs docker containers without adequate security controls to enforce isolation. This could allow an attacker to gain elevated access, potentially accessing sensitive host system resources. The affected application exposes an internal service port to be accessible from outside the system. This could allow an unauthorized attacker to access the application. The affected application uses a Content Security Policy that allows unsafe script execut…

WID-SEC-W-2024-0395 — NGINX und NGINX NGINX Plus: Mehrere Schwachstellen ermöglichen Denial of Service

2026-10-03T20:23:45.676382+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NGINX und NGINX NGINX Plus ausnutzen, um einen Denial of Service Angriff durchzuführen.