Vulnerabilities

TI-2014-03404 CVE-2014-4165 · GHSA-hpqj-mcx7-qqxg

Cross-site scripting (XSS) vulnerability in ntop allows remote attackers to inject…

LOW 24

Cross-site scripting (XSS) vulnerability in ntop allows remote attackers to inject arbitrary web script or HTML via the title parameter in a list action to plugins/rrdPlugin.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02094 Published 2014-06-16 No fix listed CWE-79

TI-2009-02606 CVE-2009-2732 · GHSA-h3h4-v8x5-4h4j

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote…

LOW 33

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon)…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07273 Published 2009-08-20 No fix listed CWE-119

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in ntop allows remote attackers to inject…

The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote…