VulnerableCode Package Details - pkg:nginx/nginx@1.4.0

Search for packages

Package details: pkg:nginx/nginx@1.4.0

Essentials
History (4)

purl	pkg:nginx/nginx@1.4.0

Next non-vulnerable version	1.29.1
Latest non-vulnerable version	1.29.1
Risk	7.6

Vulnerabilities affecting this package (4)

Vulnerability	Summary	Fixed by
VCID-4ppq-r7dp-tfbh Aliases: CVE-2014-0133	SPDY heap buffer overflow	1.4.7 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.5.12 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-ac74-v1hs-27bq Aliases: CVE-2013-2070	Memory disclosure with specially crafted HTTP backend responses	1.4.1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.5.0 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-bk4t-p8kr-5ufj Aliases: CVE-2025-53859	NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method "none," and (3) the authentication server returns the "Auth-Wait" response header. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.	1.29.1 Affected by 0 other vulnerabilities.
VCID-qnup-dwb8-jfgd Aliases: CVE-2013-2028	Stack-based buffer overflow with specially crafted request	1.4.1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.5.0 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-08-14T09:02:44.564557+00:00	Nginx Importer	Affected by	VCID-bk4t-p8kr-5ufj	https://nginx.org/en/security_advisories.html	37.0.0
2025-07-31T08:10:38.836969+00:00	Nginx Importer	Affected by	VCID-4ppq-r7dp-tfbh	https://nginx.org/en/security_advisories.html	37.0.0
2025-07-31T08:03:12.197854+00:00	Nginx Importer	Affected by	VCID-qnup-dwb8-jfgd	https://nginx.org/en/security_advisories.html	37.0.0
2025-07-31T08:03:12.044972+00:00	Nginx Importer	Affected by	VCID-ac74-v1hs-27bq	https://nginx.org/en/security_advisories.html	37.0.0