Vendors / OISF Records 108 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 11
CVSS high 73
Exploited now OISF records in CISA KEV No OISF vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02259 · Published 2019-04-04 · No fix listed CWE-125
Priority MEDIUM 41
LibHTP is a security-aware parser for the HTTP protocol.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01193 · Published 2024-02-26 · Fixed in 0.5.46 CWE-770
Priority MEDIUM 40
LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00735 · Published 2024-10-16 · Fixed in 0.5.49 CWE-770
Priority MEDIUM 40
LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00841 · Published 2024-04-04 · No fix listed CWE-770
Priority LOW 39
LibHTP is a security-aware parser for the HTTP protocol and its related bits and pieces.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00502 · Published 2025-07-23 · Fixed in 0.5.51 CWE-401
Priority LOW 37
libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02407 · Published 2017-08-28 · No fix listed CWE-476
Priority LOW 27
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01355 · Published 2019-10-09 · No fix listed CWE-459
Open these records in search → All records by CVSS severity
11 73 23 1 0
THREATIST.IORead the docs