Skip to content
Noroxi

OISF records

108 published records for vendor oisf.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
99.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

108 records
  • CVE-2018-10243
    40Plan

    htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an autho

    CriticalCVSS 9.8No exploitEPSS 2%

    oisf · libhtpApr 4, 2019

  • CVE-2018-10244
    40Plan

    Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU.

    CriticalCVSS 9.8No exploitEPSS 1%

    oisf · suricataApr 4, 2019

  • CVE-2021-37592
    39Monitor

    Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of s

    CriticalCVSS 9.8No exploitEPSS 1%

    oisf · suricataNov 19, 2021

  • CVE-2023-35853
    39Monitor

    In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code.

    CriticalCVSS 9.8No exploitEPSS 1%

    oisf · suricataJun 19, 2023

  • CVE-2026-22262
    39Monitor

    Suricata datasets: stack overflow when saving a set

    CriticalCVSS 9.8No exploitEPSS 0%

    oisf · suricataJan 27, 2026

  • CVE-2019-18792
    37Monitor

    An issue was discovered in Suricata 5.0.0.

    CriticalCVSS 9.1No exploitEPSS 2%

    oisf · suricataJan 6, 2020

  • CVE-2026-94084
    37Monitor

    Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with

    CriticalCVSS 9.4No exploitEPSS 0%

    oisf · suricataSep 20, 2026

  • CVE-2026-94083
    37Monitor

    Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even th

    CriticalCVSS 9.4No exploitEPSS 0%

    oisf · suricataSep 20, 2026

  • CVE-2026-45764
    36Monitor

    Suricata http2: protocol-change type confusion can lead to denial of service

    CriticalCVSS 9.1No exploitEPSS 0%

    oisf · suricataSep 10, 2026

  • CVE-2026-57228
    36Monitor

    Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder

    CriticalCVSS 9.1No exploitEPSS 0%

    oisf · suricataSep 18, 2026

  • CVE-2026-22264
    36Monitor

    Suricata detect/alert: heap-use-after-free on alert queue expansion

    CriticalCVSS 9.1No exploitEPSS 0%

    oisf · suricataJan 27, 2026

  • CVE-2018-1000167
    32Monitor

    OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the fo

    HighCVSS 7.8No exploitEPSS 4%

    oisf · suricata-updateApr 18, 2018

  • CVE-2024-23839
    32Monitor

    Suricata http: heap use after free with http.request_header and http.response_header keywords

    HighCVSS 8.1No exploitEPSS 0%

    oisf · suricataFeb 26, 2024

  • CVE-2020-19678
    31Monitor

    Directory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0.1 allows a remote attacker to obtain sensi

    HighCVSS 7.5No exploitEPSS 3%

    pfsense · pfsenseApr 6, 2023

  • CVE-2015-0928
    31Monitor

    libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).

    HighCVSS 7.5No exploitEPSS 2%

    oisf · libhtpAug 28, 2017

  • CVE-2019-1010251
    31Monitor

    Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass.

    HighCVSS 7.5No exploitEPSS 2%

    oisf · suricataJul 18, 2019

  • CVE-2021-35063
    31Monitor

    Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."

    HighCVSS 7.5No exploitEPSS 2%

    oisf · suricataJul 22, 2021

  • CVE-2021-45098
    31Monitor

    An issue was discovered in Suricata before 6.0.4.

    HighCVSS 7.5No exploitEPSS 1%

    oisf · suricataDec 16, 2021

  • CVE-2026-45769
    31Monitor

    ikev2: unbounded client transform storage can lead to resource exhaustion

    HighCVSS 7.5No exploitEPSS 1%

    oisf · suricataSep 10, 2026

  • CVE-2019-18625
    31Monitor

    An issue was discovered in Suricata 5.0.0.

    HighCVSS 7.5No exploitEPSS 1%

    oisf · suricataJan 6, 2020

  • CVE-2018-10242
    30Monitor

    Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner.

    HighCVSS 7.5No exploitEPSS 1%

    oisf · suricataApr 4, 2019

  • CVE-2019-1010279
    30Monitor

    Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass.

    HighCVSS 7.5No exploitEPSS 1%

    oisf · suricataJul 18, 2019

  • CVE-2019-10050
    30Monitor

    A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4.

    HighCVSS 7.5No exploitEPSS 1%

    oisf · suricataMay 13, 2019

  • CVE-2024-23837
    30Monitor

    LibHTP unbounded folded header handling leads to denial service

    HighCVSS 7.5No exploitEPSS 1%

    oisf · libhtpFeb 26, 2024

  • CVE-2024-38535
    30Monitor

    Suricata http2: oom from duplicate headers

    HighCVSS 7.5No exploitEPSS 1%

    oisf · suricataJul 11, 2024