What’s Vulnerable › Products
nginx vulnerabilities
41 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.
Check whether your nginx version is affected
Exploited nginx vulnerabilities
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
Latest nginx vulnerabilities
- CVE-2025-23419 — TLS Session Resumption Vulnerability (CVSS 4.3)
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited
- CVE-2022-41742 — NGINX ngx_http_mp4_module vulnerability CVE-2022-41742 (CVSS 7.1)
- CVE-2022-41741 — NGINX ngx_http_mp4_module vulnerability CVE-2022-41741 (CVSS 7.8)
- CVE-2021-3618 — (CVSS 7.4)
- CVE-2017-20005 — (CVSS 9.8)
- CVE-2021-23017 — (CVSS 7.7)
- CVE-2019-20372 — (CVSS 5.3)
- CVE-2011-4968 — (CVSS 4.8)
- CVE-2019-9516 — Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service (CVSS 6.5)
- CVE-2019-9513 — Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service (CVSS 7.5)
- CVE-2019-9511 — Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (CVSS 7.5)
- CVE-2018-16845 — (CVSS 6.1)
- CVE-2018-16844 — (CVSS 7.5)
- CVE-2018-16843 — (CVSS 7.5)
- CVE-2017-7529 — (CVSS 7.5)
- CVE-2016-1247 — (CVSS 7.8)
- CVE-2016-4450 — (CVSS 7.5)
- CVE-2016-0747 — (CVSS 5.3)
- CVE-2016-0746 — (CVSS 9.8)
- CVE-2016-0742 — (CVSS 7.5)
- CVE-2014-3556 — (CVSS 6.8)
- CVE-2014-3616 — (CVSS 4.3)
- CVE-2014-0088 — (CVSS 7.5)
- CVE-2014-0133 — (CVSS 7.5)