Approved changes feed: RSS · Atom

cpe:2.3:a:f5:nginx:0.5.28:*:*:*:*:*:*:*

part: a version: 0.5.28 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductNginx (d1882dfc-929c-56cc-b85b-c5d6298d6075)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nginx purl2cpe 2026-06-01 10:11:25.768104
pkg:deb/ubuntu/nginx purl2cpe 2026-06-01 10:11:25.768106
pkg:docker/nginx purl2cpe 2026-06-01 10:11:25.768107
pkg:github/stnoonan/spnego-http-auth-nginx-module purl2cpe 2026-06-01 10:11:25.768108
pkg:rpm/centos/nginx purl2cpe 2026-06-01 10:11:25.768110
pkg:rpm/fedora/nginx purl2cpe 2026-06-01 10:11:25.768111
pkg:rpm/opensuse/nginx purl2cpe 2026-06-01 10:11:25.768112

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3898 vulnerable 2026-06-08 04:51:45.172735 Details available
Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
Published: 2009-11-24T17:00:00.000Z
Updated: 2024-08-07T06:45:51.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3896 vulnerable 2026-06-08 04:51:45.100636 Details available
src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
Published: 2009-11-24T17:00:00.000Z
Updated: 2024-08-07T06:45:50.766Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.