Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Nginx Open Source
HIGH 7.8
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or o…
Nginx Plus
MEDIUM 5.4
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when c…
Nginx Open Source
HIGH 7.5
When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate…
Nginx Gateway Fabric
MEDIUM 5.9
A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers. An attacker with a ma…
Big Ip Advanced Web Application Firewall
MEDIUM 5.9
When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with conditions beyond the attacker's…
Nginx Ingress Controller
HIGH 8.3
A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-target annotation validation. Note: Software versions which have reached En…
Big Ip Access Policy Manager
HIGH 7.5
When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software v…
Big Ip Advanced Web Application Firewall
HIGH 7.5
When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Not…
Big Ip Access Policy Manager
HIGH 7.5
When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. No…
Big Ip Access Policy Manager
MEDIUM 6.1
A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of BIG-IP APM that allows an attacker to run JavaScript in the con…
F5os A
HIGH 8.8
A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges. A succes…
Big Ip Access Policy Manager
HIGH 8.7
A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh res…
Big Ip Access Policy Manager
HIGH 7.5
When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the Traffic Management Microkerne…
Big Ip Next Cloud Native Network Functions
HIGH 7.5
When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Softwa…
F5os A
HIGH 8.8
A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A succe…
Big Ip Next Cloud Native Network Functions
HIGH 7.5
When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's Cipher Rule or Cipher Group, and…
Big Ip Advanced Web Application Firewall
HIGH 7.5
When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data Guard Protection Enfor…
Big Ip Access Policy Manager
HIGH 7.5
Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. This issue may occur when a Datagram Transport Layer Security (…
F5os A
MEDIUM 5.7
An out-of-bounds write vulnerability exists in F5OS-A and F5OS-C that could lead to memory corruption. Note: Software versions which have reach…
Big Ip Access Policy Manager
HIGH 7.5
When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilizat…
Big Ip Access Policy Manager
HIGH 8.7
A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with at least re…
Big Ip Advanced Firewall Manager
HIGH 7.5
When a BIG-IP AFM denial-of-service (DoS) protection profile is configured on a virtual server, undisclosed requests can cause the Traffic Management…
F5os C
HIGH 7.5
When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane, undisclosed traffic can cause multiple containers to termi…
Big Ip Access Policy Manager
MEDIUM 6.5
A validation vulnerability exists in an undisclosed URL in the Configuration utility. Note: Software versions which have reached End of Technical Su…
Big Ip Access Policy Manager
MEDIUM 6.1
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run Ja…
Big Ip Advanced Web Application Firewall
MEDIUM 5.3
When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery (SSRF) protection or when an NGINX server is configured w…
Big Ip Access Policy Manager
MEDIUM 5.3
On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker throug…
Big Ip Access Policy Manager
HIGH 7.5
When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed traffic can cause the…
Big Ip Next Cloud Native Network Functions
HIGH 7.5
When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions whic…
Big Ip Access Policy Manager
MEDIUM 5.9
Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridge (HSB) may experie…