Записи snort
19 опубликованных записей вендора snort.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 1 · 5,3 %
- Pre-auth RCE
- 3
- С записью об исправлении
- 52,6 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-693 Protection Mechanism Failure3
- CWE-290 Authentication Bypass by Spoofing1
- CWE-426 Untrusted Search Path1
- CWE-1039 Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition Mechanism1
- CWE-755 Improper Handling of Exceptional Conditions1
- CWE-770 Allocation of Resources Without Limits or Throttling1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
19 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
64На этой неделе | CVE-2006-5276Готовый эксплойт | Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allsnort · snort | Критическая10,0 | — | 79,4 % | 19 февр. 2007 г. |
44В плане | CVE-2003-0033Эксплойта нет | Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmentesnort · snort | Критическая10,0 | — | 11,9 % | 7 мар. 2003 г. |
36Наблюдать | CVE-2016-1417Эксплойта нет | Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacsnort · snort · CWE-426 | Высокая8,8 | — | 4,4 % | 23 янв. 2017 г. |
32Наблюдать | CVE-2007-0251Эксплойта нет | Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memsnort · snort | Высокая7,8 | — | 2,4 % | 16 янв. 2007 г. |
31Наблюдать | CVE-2001-0669Proof of concept | Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detectioncisco · catalyst 6000 intrusion detection system module | Высокая7,5 | — | 4,4 % | 30 окт. 2001 г. |
31Наблюдать | CVE-2021-40114Эксплойта нет | Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerabilitycisco · secure firewall management center · CWE-770 | Высокая7,5 | — | 2,5 % | 27 окт. 2021 г. |
31Наблюдать | CVE-2021-1223Эксплойта нет | Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerabilitycisco · secure firewall management center · CWE-693 | Высокая7,5 | — | 2,0 % | 13 янв. 2021 г. |
30Наблюдать | CVE-2007-1398Proof of concept | The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ip_conntrack module lolinux · linux kernel | Высокая7,1 | — | 5,9 % | 10 мар. 2007 г. |
29Наблюдать | CVE-2009-3641Proof of concept | Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted snort · snort | Средняя4,3 | — | 38,8 % | 28 окт. 2009 г. |
28Наблюдать | CVE-2008-1804Эксплойта нет | preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, whicsnort · snort | Средняя6,8 | — | 2,3 % | 22 мая 2008 г. |
24Наблюдать | CVE-2020-3299Эксплойта нет | Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerabilitycisco · secure firewall threat defense · CWE-693 | Средняя5,8 | — | 2,3 % | 21 окт. 2020 г. |
23Наблюдать | CVE-2023-20071Эксплойта нет | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker tcisco · secure firewall threat defense · CWE-1039 | Средняя5,8 | — | 0,5 % | 1 нояб. 2023 г. |
22Наблюдать | CVE-2021-1236Эксплойта нет | Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerabilitycisco · ios xe · CWE-670 | Средняя5,3 | — | 2,2 % | 13 янв. 2021 г. |
22Наблюдать | CVE-2021-1224Эксплойта нет | Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerabilitycisco · secure firewall management center · CWE-693 | Средняя5,3 | — | 2,0 % | 13 янв. 2021 г. |
22Наблюдать | CVE-2021-1495Эксплойта нет | Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerabilitycisco · secure firewall threat defense · CWE-755 | Средняя5,3 | — | 1,7 % | 29 апр. 2021 г. |
21Наблюдать | CVE-2006-6931Эксплойта нет | Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote atsnort · snort | Средняя5,0 | — | 2,4 % | 16 янв. 2007 г. |
21Наблюдать | CVE-2023-20246Эксплойта нет | Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attackesnort · snort · CWE-290 | Средняя5,3 | — | 0,6 % | 1 нояб. 2023 г. |
20Наблюдать | CVE-2000-1226Эксплойта нет | Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remotesnort · snort | Средняя5,0 | — | 1,3 % | 31 дек. 2000 г. |
20Наблюдать | CVE-2001-1558Эксплойта нет | Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash).snort · snort | Средняя5,0 | — | 1,1 % | 31 дек. 2001 г. |
- CVE-2006-527664На этой неделе
Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; all
КритическаяCVSS 10,0Готовый эксплойтEPSS 79 %snort · snort19 февр. 2007 г.
- CVE-2003-003344В плане
Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmente
КритическаяCVSS 10,0Эксплойта нетEPSS 12 %snort · snort7 мар. 2003 г.
- CVE-2016-141736Наблюдать
Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attac
ВысокаяCVSS 8,8Эксплойта нетEPSS 4 %snort · snort23 янв. 2017 г.
- CVE-2007-025132Наблюдать
Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain mem
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %snort · snort16 янв. 2007 г.
- CVE-2001-066931Наблюдать
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection
ВысокаяCVSS 7,5Proof of conceptEPSS 4 %cisco · catalyst 6000 intrusion detection system module30 окт. 2001 г.
- CVE-2021-4011431Наблюдать
Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %cisco · secure firewall management center27 окт. 2021 г.
- CVE-2021-122331Наблюдать
Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %cisco · secure firewall management center13 янв. 2021 г.
- CVE-2007-139830Наблюдать
The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ip_conntrack module lo
ВысокаяCVSS 7,1Proof of conceptEPSS 6 %linux · linux kernel10 мар. 2007 г.
- CVE-2009-364129Наблюдать
Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted
СредняяCVSS 4,3Proof of conceptEPSS 39 %snort · snort28 окт. 2009 г.
- CVE-2008-180428Наблюдать
preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, whic
СредняяCVSS 6,8Эксплойта нетEPSS 2 %snort · snort22 мая 2008 г.
- CVE-2020-329924Наблюдать
Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability
СредняяCVSS 5,8Эксплойта нетEPSS 2 %cisco · secure firewall threat defense21 окт. 2020 г.
- CVE-2023-2007123Наблюдать
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker t
СредняяCVSS 5,8Эксплойта нетEPSS 1 %cisco · secure firewall threat defense1 нояб. 2023 г.
- CVE-2021-123622Наблюдать
Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability
СредняяCVSS 5,3Эксплойта нетEPSS 2 %cisco · ios xe13 янв. 2021 г.
- CVE-2021-122422Наблюдать
Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability
СредняяCVSS 5,3Эксплойта нетEPSS 2 %cisco · secure firewall management center13 янв. 2021 г.
- CVE-2021-149522Наблюдать
Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability
СредняяCVSS 5,3Эксплойта нетEPSS 2 %cisco · secure firewall threat defense29 апр. 2021 г.
- CVE-2006-693121Наблюдать
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote at
СредняяCVSS 5,0Эксплойта нетEPSS 2 %snort · snort16 янв. 2007 г.
- CVE-2023-2024621Наблюдать
Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacke
СредняяCVSS 5,3Эксплойта нетEPSS 1 %snort · snort1 нояб. 2023 г.
- CVE-2000-122620Наблюдать
Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote
СредняяCVSS 5,0Эксплойта нетEPSS 1 %snort · snort31 дек. 2000 г.
- CVE-2001-155820Наблюдать
Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash).
СредняяCVSS 5,0Эксплойта нетEPSS 1 %snort · snort31 дек. 2001 г.