Количество 52
Количество 52
CVE-2026-27784
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2026-27784
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2026-27784
NGINX ngx_http_mp4_module vulnerability
CVE-2026-27784
The 32-bit implementation of NGINX Open Source has a vulnerability in ...
GHSA-hwq5-42j9-jvqj
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
GHSA-6364-x4qj-7w59
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affects NGINX Open Source and NGINX Plus if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
BDU:2026-04819
Уязвимость модуля ngx_http_mp4_module HTTP-сервера NGINX Plus и NGINX Open Source, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
BDU:2026-04818
Уязвимость модуля ngx_http_mp4_module веб-серверов NGINX Open Source, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260622-73-0043
Уязвимость angie
ROS-20260622-73-0042
Уязвимость angie
ROS-20260508-73-0017
Уязвимость nginx
ROS-20260508-73-0015
Уязвимость nginx
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-27784 The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-27784 The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
 | CVE-2026-27784 NGINX ngx_http_mp4_module vulnerability | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
| CVE-2026-27784 The 32-bit implementation of NGINX Open Source has a vulnerability in ... | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
| GHSA-hwq5-42j9-jvqj The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
| GHSA-6364-x4qj-7w59 NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affects NGINX Open Source and NGINX Plus if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
 | BDU:2026-04819 Уязвимость модуля ngx_http_mp4_module HTTP-сервера NGINX Plus и NGINX Open Source, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
| BDU:2026-04818 Уязвимость модуля ngx_http_mp4_module веб-серверов NGINX Open Source, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
 | ROS-20260622-73-0043 Уязвимость angie | CVSS3: 7.8 | 1% Низкий | около 1 месяца назад |
| ROS-20260622-73-0042 Уязвимость angie | CVSS3: 7.8 | 1% Низкий | около 1 месяца назад |
| ROS-20260508-73-0017 Уязвимость nginx | CVSS3: 7.8 | 1% Низкий | 3 месяца назад |
| ROS-20260508-73-0015 Уязвимость nginx | CVSS3: 7.8 | 1% Низкий | 3 месяца назад |
Уязвимостей на страницу