CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 04/04/2019 |
| CVE-2018-10243 | 심각9.8 | htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header. | 04/04/2019 |
| CVE-2018-10242 | 높음7.5 | Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing code to read beyond the allocated data because SSHParseBanner in app-layer-ssh.c lacks a length check. | 04/04/2019 |
| CVE-2018-1000167 | 높음7.8 | OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 and sources.py:131. The "list-sources"-command is affected by this bug. that can result in Remote Code Execution(even as | 18/04/2018 |
| CVE-2015-0928 | 높음7.5 | libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference). | 28/08/2017 |
| CVE-2013-5919 | 보통5.0 | Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record. | 30/05/2014 |