CVE-2017-18594
- EPSS 1.17%
- Published 29.08.2019 00:15:10
- Last modified 21.11.2024 03:20:28
nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.
CVE-2018-15173
- EPSS 0.8%
- Published 08.08.2018 00:29:01
- Last modified 21.11.2024 03:50:27
Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted TCP-based service.
CVE-2018-1000161
- EPSS 0.18%
- Published 18.04.2018 19:29:00
- Last modified 21.11.2024 03:39:49
nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a...
CVE-2013-4885
- EPSS 6.43%
- Published 26.10.2013 17:55:03
- Last modified 11.04.2025 00:51:21
The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory travers...