suricata-ids kayıtları
suricata-ids üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-125 Out-of-bounds Read4
- CWE-20 Improper Input Validation2
- CWE-459 Incomplete Cleanup1
- CWE-693 Protection Mechanism Failure1
- CWE-707 Improper Neutralization1
- CWE-754 Improper Check for Unusual or Exceptional Conditions1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
40Planlayın | CVE-2019-16411İstismar yok | An issue was discovered in Suricata 4.1.4.suricata-ids · suricata · CWE-125 | Kritik9,8 | %2,024 Eyl 2019 |
40Planlayın | CVE-2019-10053İstismar yok | An issue was discovered in Suricata 4.1.x before 4.1.4.suricata-ids · suricata · CWE-125 | Kritik9,8 | %1,713 May 2019 |
37İzleyin | CVE-2019-16410İstismar yok | An issue was discovered in Suricata 4.1.4.suricata-ids · suricata · CWE-125 | Kritik9,1 | %2,124 Eyl 2019 |
36İzleyin | CVE-2019-15699İstismar yok | An issue was discovered in app-layer-ssl.c in Suricata 4.1.4.suricata-ids · suricata · CWE-125 | Kritik9,1 | %1,624 Eyl 2019 |
31İzleyin | CVE-2018-18956İstismar yok | The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfsuricata-ids · suricata · CWE-119 | Yüksek7,5 | %2,85 Kas 2018 |
31İzleyin | CVE-2019-10051İstismar yok | An issue was discovered in Suricata 4.1.3.suricata-ids · suricata · CWE-754 | Yüksek7,5 | %2,128 Ağu 2019 |
31İzleyin | CVE-2019-10052İstismar yok | An issue was discovered in Suricata 4.1.3.suricata-ids · suricata · CWE-707 | Yüksek7,5 | %2,128 Ağu 2019 |
31İzleyin | CVE-2018-14568İstismar yok | Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server.suricata-ids · suricata | Yüksek7,5 | %1,923 Tem 2018 |
30İzleyin | CVE-2019-10055İstismar yok | An issue was discovered in Suricata 4.1.3.suricata-ids · suricata · CWE-190 | Yüksek7,5 | %1,428 Ağu 2019 |
30İzleyin | CVE-2019-10056İstismar yok | An issue was discovered in Suricata 4.1.3.suricata-ids · suricata · CWE-787 | Yüksek7,5 | %1,328 Ağu 2019 |
30İzleyin | CVE-2019-10054İstismar yok | An issue was discovered in Suricata 4.1.3.suricata-ids · suricata · CWE-20 | Yüksek7,5 | %1,328 Ağu 2019 |
28İzleyin | CVE-2018-6794Kavram kanıtı | Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c.suricata-ids · suricata · CWE-693 | Orta5,3 | %23,67 Şub 2018 |
22İzleyin | CVE-2016-10728İstismar yok | An issue was discovered in Suricata before 3.1.2.suricata-ids · suricata · CWE-20 | Orta5,3 | %2,023 Tem 2018 |
21İzleyin | CVE-2019-17420İstismar yok | In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature oisf · libhtp · CWE-459 | Orta5,3 | %1,39 Eki 2019 |
- CVE-2019-1641140Planlayın
An issue was discovered in Suricata 4.1.4.
KritikCVSS 9,8İstismar yokEPSS %2suricata-ids · suricata24 Eyl 2019
- CVE-2019-1005340Planlayın
An issue was discovered in Suricata 4.1.x before 4.1.4.
KritikCVSS 9,8İstismar yokEPSS %1suricata-ids · suricata13 May 2019
- CVE-2019-1641037İzleyin
An issue was discovered in Suricata 4.1.4.
KritikCVSS 9,1İstismar yokEPSS %2suricata-ids · suricata24 Eyl 2019
- CVE-2019-1569936İzleyin
An issue was discovered in app-layer-ssl.c in Suricata 4.1.4.
KritikCVSS 9,1İstismar yokEPSS %1suricata-ids · suricata24 Eyl 2019
- CVE-2018-1895631İzleyin
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segf
YüksekCVSS 7,5İstismar yokEPSS %2suricata-ids · suricata5 Kas 2018
- CVE-2019-1005131İzleyin
An issue was discovered in Suricata 4.1.3.
YüksekCVSS 7,5İstismar yokEPSS %2suricata-ids · suricata28 Ağu 2019
- CVE-2019-1005231İzleyin
An issue was discovered in Suricata 4.1.3.
YüksekCVSS 7,5İstismar yokEPSS %2suricata-ids · suricata28 Ağu 2019
- CVE-2018-1456831İzleyin
Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server.
YüksekCVSS 7,5İstismar yokEPSS %1suricata-ids · suricata23 Tem 2018
- CVE-2019-1005530İzleyin
An issue was discovered in Suricata 4.1.3.
YüksekCVSS 7,5İstismar yokEPSS %1suricata-ids · suricata28 Ağu 2019
- CVE-2019-1005630İzleyin
An issue was discovered in Suricata 4.1.3.
YüksekCVSS 7,5İstismar yokEPSS %1suricata-ids · suricata28 Ağu 2019
- CVE-2019-1005430İzleyin
An issue was discovered in Suricata 4.1.3.
YüksekCVSS 7,5İstismar yokEPSS %1suricata-ids · suricata28 Ağu 2019
- CVE-2018-679428İzleyin
Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c.
OrtaCVSS 5,3Kavram kanıtıEPSS %23suricata-ids · suricata7 Şub 2018
- CVE-2016-1072822İzleyin
An issue was discovered in Suricata before 3.1.2.
OrtaCVSS 5,3İstismar yokEPSS %2suricata-ids · suricata23 Tem 2018
- CVE-2019-1742021İzleyin
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature
OrtaCVSS 5,3İstismar yokEPSS %1oisf · libhtp9 Eki 2019