CVE-2014-4329

Description

References

• packetstormsecurity.com/files/127329/Ntop-NG-1.1-Cross-Site-Scripting.html · Exploit
• ntop.org/ndpi/released-ndpi-1-5-1-and-ntopng-1-2-1 · Vendor Advisory
• securityfocus.com/bid/66456
• exchange.xforce.ibmcloud.com/vulnerabilities/92135
• svn.ntop.org/bugzilla/show_bug.cgi

Más vulnerabilidades de ntopng

• CVE-2026-38968CRÍTICO 9.8ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTP…
• CVE-2018-12520ALTO 8.1An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at program startup…
• CVE-2017-7458ALTO 7.5The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NU…
• CVE-2017-7459ALTO 7.5ntopng before 3.0 allows HTTP Response Splitting.
• CVE-2017-7416MEDIO 6.1ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated.