Known Vulnerabilities for products from Ossec
Listed below are 12 of the newest known vulnerabilities associated with the vendor "Ossec".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-28040 json | An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of ope... | 7.5 - HIGH | 2021-03-05 | 2021-03-09 |
| CVE-2020-8448 json | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a denia... | 5.5 - MEDIUM | 2020-01-30 | 2022-09-12 |
| CVE-2020-8447 json | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-a... | 9.8 - CRITICAL | 2020-01-30 | 2022-09-12 |
| CVE-2020-8446 json | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to path tr... | 5.5 - MEDIUM | 2020-01-30 | 2022-09-12 |
| CVE-2020-8445 json | In OSSEC-HIDS 2.7 through 3.5.0, the OS_CleanMSG function in ossec-analysisd doesn't remove or encode terminal control charac... | 9.8 - CRITICAL | 2020-01-30 | 2022-09-12 |
| CVE-2020-8444 json | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-a... | 9.8 - CRITICAL | 2020-01-30 | 2022-09-12 |
| CVE-2020-8443 json | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to an off-... | 9.8 - CRITICAL | 2020-01-30 | 2022-04-26 |
| CVE-2020-8442 json | In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a heap-... | 8.8 - HIGH | 2020-01-30 | 2022-09-12 |
| CVE-2018-19666 json | The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by ... | 7.8 - HIGH | 2018-11-29 | 2019-01-04 |
| CVE-2016-4847 json | Cross-site scripting (XSS) vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbi... | 6.1 - MEDIUM | 2017-04-20 | 2017-04-25 |
| CVE-2015-3222 json | syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root. | 7 - HIGH | 2017-09-07 | 2017-09-13 |
| CVE-2014-5284 json | host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, which al... | 7.2 - HIGH | 2014-12-02 | 2014-12-02 |