SN
Vendor
Snort
18
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-20246 | SN Snort Snort | 5.3 | Nov 1 | Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on… |
| CVE-2021-40114 | SN Snort Snort | 7.5 | Oct 27 | Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause… |
| CVE-2021-1495 | SN Snort Snort | 5.3 | Apr 29 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… |
| CVE-2021-1236 | SN Snort Snort | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured… |
| CVE-2021-1224 | SN Snort Snort | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated,… |
| CVE-2021-1223 | SN Snort Snort | 7.5 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… |
| CVE-2020-3299 | SN Snort Snort | 5.8 | Oct 21 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured File Policy for… |
| CVE-2016-1417 | SN Snort Snort | 8.8 | Jan 23 | Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is… |
| CVE-2009-3641 | SN Snort Snort | – | Oct 28 | Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or… |
| CVE-2008-1804 | SN Snort Snort | – | May 22 | preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass… |
| CVE-2007-1398 | SN Snort Snort | – | Mar 10 | The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ip_conntrack module loaded, allows remote attackers to cause… |
| CVE-2006-5276 | SN Snort Snort | – | Feb 20 | Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute… |
| CVE-2006-6931 | SN Snort Snort | – | Jan 16 | Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service… |
| CVE-2007-0251 | SN Snort Snort | – | Jan 16 | Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets,… |
| CVE-2003-0033 | SN Snort Snort | – | Mar 7 | Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets |
| CVE-2001-1558 | SN Snort Snort | – | Dec 31 | Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash) |
| CVE-2001-0669 | SN Snort Snort | – | Oct 30 | Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x,… |
| CVE-2000-1226 | SN Snort Snort | – | Dec 31 | Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service… |