Read the docs

OISF

Records108All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high73CVSS 7.0–8.9

Exploited now

OISF records in CISA KEV

No OISF vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

100 records in Suricata · all components

Priority HIGH 72

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0042 Published 2026-09-10 Fixed in 7.0.16 CWE-476
Priority HIGH 72

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00597 Published 2024-10-16 Fixed in 7.0.7 CWE-617
TI-2026-63304 CVE-2026-94084 · GHSA-4jpj-5857-48jp

Use after free in OISF Suricata

Priority MEDIUM 49

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.0054 Published 2026-09-20 Fixed in 8.0.7 CWE-416
TI-2026-63303 CVE-2026-94083 · GHSA-4wwf-734g-mqm8

Type confusion in OISF Suricata

Priority MEDIUM 49

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 (when there is a DoH2 request with an HTTP1 to HT…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.0054 Published 2026-09-20 Fixed in 8.0.7 CWE-843
TI-2019-13529 CVE-2019-18792 · GHSA-p4hg-mvq8-47jj

An issue was discovered in Suricata 5.0.0.

Priority MEDIUM 44

An issue was discovered in Suricata 5.0.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02521 Published 2020-01-06 No fix listed CWE-436
Priority MEDIUM 41

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01172 Published 2024-07-11 Fixed in 6.0.20, 7.0.6 CWE-770
Load more
Open these records in search →