Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

L0Kihardt

#13699of 53,635
19.6Total CVSS
Vulnerabilities · 2
Critical
2
PT-2023-11527
9.8
2023-04-04
Nginx · Nginx Njs · CVE-2020-19692
**Name of the Vulnerable Software and Affected Versions** Nginx NJS version 0feca92 **Description** A Buffer Overflow issue allows a remote attacker to execute arbitrary code via the `njs module read` function in the `njs module.c` file. This enables the attacker to potentially gain control over the system. **Recommendations** For Nginx NJS version 0feca92, consider disabling the `njs module read` function as a temporary workaround until a patch is available. Restrict access to the `njs module.c` file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
PT-2023-11529
9.8
2023-04-04
Nginx · Nginx Njs · CVE-2020-19695
**Name of the Vulnerable Software and Affected Versions** Nginx NJS (affected versions not specified) **Description** A Buffer Overflow issue allows a remote attacker to execute arbitrary code via the `njs object property` parameter of the `njs/njs vm.c` function, specifically through the `njs object property` parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.