Login Request a demo
OI
Vendor
OISF
3 products with CVEs on record
108
CVEs
0
On KEV
0
New 30D
Products
SU
suricata
OISF
9.8
100 CVEs0 on KEV0 new
LI
Libhtp
Oisf
9.8
7 CVEs0 on KEV0 new
SU
Suricata-update
Oisf
7.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-94084
SU
Suricata
OISF
9.4
1%
Sep 20Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform
CVE-2026-94083
SU
Suricata
OISF
9.4
1%
Sep 20Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 (when…
CVE-2026-71855
SU
suricata
OISF
7.5
0%
Sep 18Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow state
CVE-2026-71418
SU
suricata
OISF
7.5
1%
Sep 18Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption
CVE-2026-57223
SU
suricata
OISF
7.0
0%
Sep 18Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation
CVE-2026-63446
SU
suricata
OISF
7.5
1%
Sep 18Suricata app-layer: passed flows can retain transactions, causing resource exhaustion
CVE-2026-63447
SU
suricata
OISF
7.5
1%
Sep 18Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption
CVE-2026-63448
SU
suricata
OISF
7.5
0%
Sep 18Suricata smb: some SMB flows can cause resource exhaustion
CVE-2026-57229
SU
suricata
OISF
5.3
0%
Sep 18Suricata smtp/mime: incomplete state reset allows detection bypass
CVE-2026-57225
SU
suricata
OISF
5.5
0%
Sep 18Suricata datasets: NULL pointer dereference in JSON/NDJSON dataset loading
CVE-2026-63452
SU
suricata
OISF
7.5
1%
Sep 18Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption
CVE-2026-63451
SU
suricata
OISF
5.5
0%
Sep 18Suricata detect: frame rules without content and with transform can cause heap buffer overflow during rule load
CVE-2026-57227
SU
suricata
OISF
7.5
1%
Sep 18Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages
CVE-2026-63450
SU
suricata
OISF
5.3
0%
Sep 18Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection
CVE-2026-63449
SU
suricata
OISF
5.3
0%
Sep 18Suricata sip: large SIP message bodies can evade detection with frame keyword
CVE-2026-57228
SU
suricata
OISF
9.1
0%
Sep 18Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder
CVE-2026-57224
SU
suricata
OISF
6.5
0%
Sep 18Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion
CVE-2026-57226
SU
suricata
OISF
5.9
1%
Sep 18Suricata swf: heap buffer overflow in SWF decompression depth handling
CVE-2026-57222
SU
suricata
OISF
5.3
0%
Sep 18Suricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6
CVE-2026-46352
SU
suricata
OISF
7.5
0%
Sep 16Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock
CVE-2026-45770
SU
suricata
OISF
7.5
0%
Sep 10Suricata lua: excessive flow variable registration can bypass sandbox
CVE-2026-45769
SU
suricata
OISF
7.5
2%
Sep 10ikev2: unbounded client transform storage can lead to resource exhaustion
CVE-2026-45768
SU
suricata
OISF
7.5
1%
Sep 10Suricata ldap: unbounded responses per transaction can lead to resource exhaustion
CVE-2026-45767
SU
suricata
OISF
4.4
0%
Sep 10Suricata datasets: save to absolute filename can be bypassed when combined with load command
CVE-2026-45766
SU
suricata
OISF
7.5
1%
Sep 10Suricata nfs: unbounded stateful structures can lead to resource exhaustion
CVE-2026-45765
SU
suricata
OISF
7.5
1%
Sep 10Suricata dnp3: unbounded reassembly can lead to resource exhaustion
CVE-2026-45764
SU
suricata
OISF
9.1
1%
Sep 10Suricata http2: protocol-change type confusion can lead to denial of service
CVE-2026-45762
SU
suricata
OISF
7.5
1%
Sep 10Suricata defrag: missing address-family check can lead to remote crash
CVE-2026-45761
SU
suricata
OISF
3.3
0%
Sep 10Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rule load
CVE-2026-45759
SU
suricata
OISF
7.5
1%
Sep 10Suricata http1: quadratic Content-Disposition processing can lead to denial of service
CVE-2026-45752
SU
suricata
OISF
5.9
1%
Sep 10Suricata detect/transform: use-after-free in decompress transforms
CVE-2026-45751
SU
suricata
OISF
7.5
0%
Sep 10Suricata detect/transform: use-after-free in dotprefix transform
CVE-2026-45747
SU
suricata
OISF
7.5
0%
Sep 10Suricata lua/tls: null dereference in TlsGetCertInfo
CVE-2026-46387
SU
suricata
OISF
7.5
1%
Sep 10Suricata http2: decompression bomb can cause denial of service in Suricata
CVE-2026-45763
SU
suricata
OISF
5.9
1%
Sep 10Suricata lua: sandbox allocation limit not enforced for new allocations
CVE-2026-31937
SU
suricata
OISF
7.5
0%
Apr 2Suricata dcerpc: quadratic complexity in dcerpc buffering
CVE-2026-31935
SU
suricata
OISF
7.5
0%
Apr 2Suricata http2: unbounded resource consumption
CVE-2026-31934
SU
suricata
OISF
7.5
0%
Apr 2Suricata smtp/mine: quadratic complexity in extracting urls
CVE-2026-31933
SU
suricata
OISF
7.5
0%
Apr 2Suricata stream: quadratic complexity in stream inspection
CVE-2026-31932
SU
suricata
OISF
7.5
0%
Apr 2Suricata krb5: quadratic complexity in krb5 buffering
CVE-2026-31931
SU
suricata
OISF
7.5
0%
Apr 2Suricata tls: null dereference in tls.alpn rule keyword
CVE-2026-22264
SU
Suricata
Oisf
9.1
0%
Jan 27Suricata is a network IDS, IPS and NSM engine
CVE-2026-22263
SU
Suricata
Oisf
5.3
0%
Jan 27Suricata is a network IDS, IPS and NSM engine
CVE-2026-22262
SU
Suricata
Oisf
9.8
1%
Jan 27Suricata is a network IDS, IPS and NSM engine
CVE-2026-22261
SU
Suricata
Oisf
5.3
0%
Jan 27Suricata is a network IDS, IPS and NSM engine
CVE-2026-22260
SU
Suricata
Oisf
7.5
1%
Jan 27Suricata is a network IDS, IPS and NSM engine
CVE-2026-22259
SU
Suricata
Oisf
7.5
1%
Jan 27Suricata is a network IDS, IPS and NSM engine
CVE-2026-22258
SU
Suricata
Oisf
7.5
1%
Jan 27Suricata is a network IDS, IPS and NSM engine
CVE-2025-64344
SU
Suricata
Oisf
7.5
0%
Nov 26Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community
CVE-2025-64335
SU
Suricata
Oisf
7.5
0%
Nov 26Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community
CVE-2025-64334
SU
Suricata
Oisf
7.5
0%
Nov 26Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community
CVE-2025-64333
SU
Suricata
Oisf
7.5
0%
Nov 26Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community
CVE-2025-64332
SU
Suricata
Oisf
7.5
0%
Nov 26Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community
CVE-2025-64331
SU
Suricata
Oisf
7.5
0%
Nov 26Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community
CVE-2025-64330
SU
Suricata
Oisf
7.5
0%
Nov 26Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community
CVE-2025-59150
SU
Suricata
Oisf
7.5
1%
Oct 1Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community
CVE-2025-59149
SU
Suricata
Oisf
6.2
0%
Oct 1Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community
CVE-2025-59148
SU
Suricata
Oisf
7.5
0%
Oct 1Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community
CVE-2025-59147
SU
Suricata
Oisf
7.5
0%
Oct 1Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community
CVE-2025-53537
LI
Libhtp
Oisf
7.5
1%
Jul 23LibHTP is a security-aware parser for the HTTP protocol and its related bits and pieces