Skip to content
OpenAdvisories

Package · Azure Linux

ntopng

20 known vulnerabilities.

5 results · Clear filters · Feed

  • Medium 5.3

    ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets

    ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpi_get_custom_category_match writes a four-byte nDPI protocol-category value through a pointer to the two-byte id variable in IpAddress::reloadBlacklist in src/IpAddress.cpp …

  • Medium 6.9

    Save stack space while handling errors in praydog/REFramework

    An issue from the component luaG_runerror in dependencies/lua/src/ldebug.c in praydog/REFramework version before 1.5.5 leads to a heap-buffer overflow when a recursive error occurs.

  • Medium 6.2

    A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function.

  • Medium 6.4
    CVE-2024-6485 Public exploit

    XSS in Bootstrap button component

    A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting mal…

  • Medium 6.1
    CVE-2019-8331 Public exploit EPSS 16%

    Bootstrap Vulnerable to Cross-Site Scripting

    In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.