CVE-2026-38968 | Critical | 9.8 | 2026-07-02 | ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak… |
CVE-2026-45448 | Medium | 4.3 | 2026-05-14 | CWE-601 URL redirection to untrusted site ('open redirect') |
CVE-2025-25066 | High | 8.1 | 2025-02-03 | nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c. |
CVE-2021-36082 | High | 8.8 | 2021-07-01 | ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello. |
CVE-2020-15476 | High | 7.5 | 2020-07-01 | In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c. |
CVE-2020-15475 | Critical | 9.8 | 2020-07-01 | In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free. |
CVE-2020-15474 | Critical | 9.8 | 2020-07-01 | In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c. |
CVE-2020-15473 | Critical | 9.1 | 2020-07-01 | In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c. |
CVE-2020-15472 | Critical | 9.1 | 2020-07-01 | In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpi_search_h323 in lib/protocols/h323.c, as demonstrated by a paylo… |
CVE-2020-15471 | Critical | 9.1 | 2020-07-01 | In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in lib/ndpi_main.c. |
CVE-2020-11940 | High | 7.5 | 2020-04-23 | In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positioned attacker that can send malformed SSH… |
CVE-2020-11939 | Critical | 9.8 | 2020-04-23 | In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlled remote heap overflow in concat_hash_s… |
CVE-2018-12520 | High | 8.1 | 2018-07-05 | An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at program startup. This results in d… |
CVE-2017-7458 | High | 7.5 | 2017-06-26 | The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NULL pointer derefere… |
CVE-2017-7459 | High | 7.5 | 2017-06-26 | ntopng before 3.0 allows HTTP Response Splitting. |
CVE-2017-7416 | Medium | 6.1 | 2017-06-26 | ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated. |
CVE-2017-5473 | High | 8.8 | 2017-01-14 | Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of arbitrary users, as demonstrated… |
CVE-2015-8368 | | | 2015-12-17 | ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to ad… |
CVE-2014-5464 | | | 2014-09-08 | Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 allows remote attackers to inject arbitra… |
CVE-2014-4329 | | | 2014-06-19 | Cross-site scripting (XSS) vulnerability in lua/host_details.lua in ntopng 1.1 allows remote attackers to inject arbitrary web script or HTML via the host para… |
CVE-2014-4165 | | | 2014-06-16 | Cross-site scripting (XSS) vulnerability in ntop allows remote attackers to inject arbitrary web script or HTML via the title parameter in a list action to plu… |
CVE-2009-2732 | | | 2009-08-21 | The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon c… |