Approved changes feed: RSS · Atom

cpe:2.3:a:nmap:nmap:3.40:pvt4:*:*:*:*:*:*

part: a version: 3.40 update: pvt4

VendorNmap (765412fc-2cf3-593f-b684-e0e7ee0595d5)
ProductNmap (a377a570-3333-523e-b4e7-b23e2691dee7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nmap purl2cpe 2026-06-01 10:13:31.236992
pkg:deb/ubuntu/nmap purl2cpe 2026-06-01 10:13:31.236994
pkg:github/nmap/nmap purl2cpe 2026-06-01 10:13:31.236995
pkg:gitlab/kalilinux/nmap purl2cpe 2026-06-01 10:13:31.236997
pkg:gitlab/redhat/nmap purl2cpe 2026-06-01 10:13:31.236998
pkg:rpm/centos/nmap purl2cpe 2026-06-01 10:13:31.237000
pkg:rpm/fedora/nmap purl2cpe 2026-06-01 10:13:31.237002
pkg:rpm/opensuse/nmap purl2cpe 2026-06-01 10:13:31.237003

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4885 vulnerable 2026-06-08 05:04:50.119946 Details available
The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.
Published: 2013-10-26T17:00:00.000Z
Updated: 2024-08-06T16:59:40.513Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.