Known Vulnerabilities for products from Ntop
Listed below are 19 of the newest known vulnerabilities associated with the vendor "Ntop".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-36082 json | ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello. | 8.8 - HIGH | 2021-07-01 | 2021-07-08 |
| CVE-2020-15476 json | In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/o... | 7.5 - HIGH | 2020-07-01 | 2022-09-09 |
| CVE-2020-15475 json | In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-fr... | 9.8 - CRITICAL | 2020-07-01 | 2020-07-06 |
| CVE-2020-15474 json | In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c. | 9.8 - CRITICAL | 2020-07-01 | 2020-07-06 |
| CVE-2020-15473 json | In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/proto... | 9.1 - CRITICAL | 2020-07-01 | 2020-07-06 |
| CVE-2020-15472 json | In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpi_search_h323 in lib/protocols/... | 9.1 - CRITICAL | 2020-07-01 | 2022-09-09 |
| CVE-2020-15471 json | In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in... | 9.1 - CRITICAL | 2020-07-01 | 2020-07-06 |
| CVE-2020-11940 json | In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positioned att... | 7.5 - HIGH | 2020-04-23 | 2020-05-06 |
| CVE-2020-11939 json | In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlled rem... | 9.8 - CRITICAL | 2020-04-23 | 2021-07-21 |
| CVE-2018-12520 json | An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at ... | 8.1 - HIGH | 2018-07-05 | 2019-10-03 |
| CVE-2017-7459 json | ntopng before 3.0 allows HTTP Response Splitting. | 7.5 - HIGH | 2017-06-26 | 2019-10-03 |
| CVE-2017-7458 json | The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial... | 7.5 - HIGH | 2017-06-26 | 2017-06-29 |
| CVE-2017-7416 json | ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated. | 6.1 - MEDIUM | 2017-06-26 | 2017-06-29 |
| CVE-2017-5473 json | Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of... | 8.8 - HIGH | 2017-01-14 | 2017-09-02 |
| CVE-2015-8368 json | ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user c... | 6 - MEDIUM | 2015-12-17 | 2015-12-18 |
| CVE-2014-5464 json | Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 allows ... | 4.3 - MEDIUM | 2014-09-08 | 2018-10-09 |
| CVE-2014-4329 json | Cross-site scripting (XSS) vulnerability in lua/host_details.lua in ntopng 1.1 allows remote attackers to inject arbitrary we... | 4.3 - MEDIUM | 2014-06-19 | 2017-08-29 |
| CVE-2014-4165 json | Cross-site scripting (XSS) vulnerability in ntop allows remote attackers to inject arbitrary web script or HTML via the title... | 4.3 - MEDIUM | 2014-06-16 | 2018-10-30 |
| CVE-2009-2732 json | The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NUL... | Not Provided | 2009-08-21 | 2026-04-23 |