Approved changes feed: RSS · Atom

cpe:2.3:a:f5:nginx:1.3.0:*:*:*:*:*:*:*

part: a version: 1.3.0 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductNginx (d1882dfc-929c-56cc-b85b-c5d6298d6075)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nginx purl2cpe 2026-06-01 10:11:25.771440
pkg:deb/ubuntu/nginx purl2cpe 2026-06-01 10:11:25.771441
pkg:docker/nginx purl2cpe 2026-06-01 10:11:25.771443
pkg:github/stnoonan/spnego-http-auth-nginx-module purl2cpe 2026-06-01 10:11:25.771444
pkg:rpm/centos/nginx purl2cpe 2026-06-01 10:11:25.771445
pkg:rpm/fedora/nginx purl2cpe 2026-06-01 10:11:25.771447
pkg:rpm/opensuse/nginx purl2cpe 2026-06-01 10:11:25.771448

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-0337 vulnerable 2026-06-08 05:03:47.144267 Details available
The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.
Published: 2013-10-27T00:00:00.000Z
Updated: 2024-08-06T14:25:09.144Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4963 vulnerable 2026-06-08 04:59:34.072533 Details available
nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
Published: 2012-07-26T19:00:00.000Z
Updated: 2024-09-16T19:56:18.339Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.