ntopng vulnerabilities (Azure Linux)
20 vulnerabilities.
-
ntopngAzure Linux ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets 5.3 Medium -
ntopngAzure Linux ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`) 8.8 High -
ntopngAzure Linux ntopng: Missing Authorization on System Configuration Backup Download and Listing 8.8 High -
ntopngAzure Linux ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs 8.1 High -
ntopngAzure Linux ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API 8.8 High -
ntopngAzure Linux ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape 8.3 High -
ntopngAzure Linux ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler 7.1 High -
ntopngAzure Linux ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers 7.1 High -
ntopngAzure Linux ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session... 9.8 Critical -
ntopngAzure Linux Save stack space while handling errors in praydog/REFramework 6.9 Medium -
ntopngAzure Linux A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS... 6.2 Medium -
ntopngAzure Linux XSS in Bootstrap button component 6.4 Medium -
ntopngAzure Linux In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over... 7.5 High -
ntopngAzure Linux An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow... 7.5 High -
ntopngAzure Linux singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a... 9.1 Critical -
ntopngAzure Linux Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows... 6.3 Medium -
ntopngAzure Linux Lua 5.4.4 and 5.4.2 are affected by SEGV by type confusion in funcnamefromcode function in ldebug... 5.5 Medium -
ntopngAzure Linux Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform... 5.5 Medium -
ntopngAzure Linux Bootstrap Vulnerable to Cross-Site Scripting 6.1 Medium -
ntopngAzure Linux Regular Expression Denial of Service in moment 7.5 High