Approved changes feed: RSS · Atom

cpe:2.3:a:f5:nginx:0.7.64:*:*:*:*:*:*:*

part: a version: 0.7.64 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductNginx (d1882dfc-929c-56cc-b85b-c5d6298d6075)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nginx purl2cpe 2026-06-01 10:11:25.769232
pkg:deb/ubuntu/nginx purl2cpe 2026-06-01 10:11:25.769233
pkg:docker/nginx purl2cpe 2026-06-01 10:11:25.769235
pkg:github/stnoonan/spnego-http-auth-nginx-module purl2cpe 2026-06-01 10:11:25.769236
pkg:rpm/centos/nginx purl2cpe 2026-06-01 10:11:25.769237
pkg:rpm/fedora/nginx purl2cpe 2026-06-01 10:11:25.769239
pkg:rpm/opensuse/nginx purl2cpe 2026-06-01 10:11:25.769240

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4968 vulnerable 2026-06-08 04:59:34.116592 Details available
nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
Published: 2019-11-19T15:18:17.000Z
Updated: 2024-08-07T00:23:39.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4487 vulnerable 2026-06-08 04:51:48.641030 Details available
nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
Published: 2010-01-13T20:00:00.000Z
Updated: 2024-08-07T07:01:20.466Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.