85 exploited vulnerabilities in Nginx
- Vendors
- Discourse, Nginx, Kiwi Tcms, Tdengine, Unknown, Apache
- With known exploits
- 85
- Affected Discourse versions
- ≤ 3.1.1, 3.2.0, 2.8.7, 2.9.0
- Affected Kiwitcms Kiwi Tcms versions
- < 12.0
- Affected Alibaba Tengine versions
- = 2.2.2
- Affected Bigbluebutton versions
- < 2.3.19, 2.4.7, 2.5
- Affected Http\:\:daemon Project Http\:\:daemon versions
- < 6.15
- Affected Onenav versions
- = 0.9.12
- Affected Mi Millet Router 3g Firmware versions
- < 2.28.23
- Affected f5 Nginx versions
- < 1.4.4, 1.5.6, 1.4.0, 0.5.38, 0.6.39, 0.7.62, 0.8.15, 1.21.0, 0.7.64, 1.17.7, 0.7.67, 0.8.40, 0.7.66, 0.8.39, 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7, 0.1.8, 0.1.9, 0.1.10, 0.1.11, 0.1.12, 0.1.13, 0.1.14, 0.1.15, 0.1.16, 0.1.17, 0.1.18, 0.1.19, 0.1.20, 0.1.21, 0.1.22, 0.1.23, 0.1.24, 0.1.25, 0.1.26, 0.1.27, 0.1.28, 0.1.29, 0.1.30, 0.1.31, 0.1.32, 0.1.33, 0.1.34, 0.1.35, 0.1.36, 0.1.37, 0.1.38, 0.1.39
Vulnerabilities with exploits
Highest CVSS first — 15 of these already have exploit code on Sploitus
CVE-2023-44388
CVE-2023-25156
CVE-2020-21699
CVE-2022-29169
CVE-2022-31081
CVE-2021-38712
CVE-2019-18371 2 exploits
CVE-2013-4547 19 exploits
CVE-2013-2028 22 exploits
CVE-2009-2629 4 exploits
CVE-2021-3618 1 exploit
CVE-2021-3882 1 exploit
CVE-2025-54571
CVE-2026-0865
CVE-2023-29004
CVE-2021-24490 1 exploit
CVE-2009-4487 2 exploits
CVE-2026-54738
CVE-2024-1076 1 exploit
CVE-2024-21510
CVE-2026-25552
CVE-2024-45614 1 exploit
CVE-2023-28837
CVE-2026-19670
CVE-2024-24562
CVE-2023-40570
CVE-2022-31182
CVE-2019-20372 5 exploits
CVE-2024-22200
CVE-2010-2266 1 exploit
CVE-2010-2263 5 exploits
CVE-2009-3896 1 exploit
CVE-2009-3898 1 exploit
CVE-2023-47106
CVE-2019-12938