Approved changes feed: RSS · Atom
cpe:2.3:a:ntop:ntopng:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ntop (36c4641a-90b9-5196-8d0f-21750543701f) |
|---|---|
| Product | Ntopng (d5c514ca-4006-5a3e-83db-ead4d44d94a9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/ntopng |
purl2cpe | 2026-06-01 10:14:48.731619 |
pkg:deb/ubuntu/ntopng |
purl2cpe | 2026-06-01 10:14:48.731622 |
pkg:github/ntop/ntopng |
purl2cpe | 2026-06-01 10:14:48.731624 |
pkg:gitlab/kalilinux/ntopng |
purl2cpe | 2026-06-01 10:14:48.731627 |
pkg:rpm/opensuse/ntopng |
purl2cpe | 2026-06-01 10:14:48.731630 |
pkg:sourceforge/ntopng |
purl2cpe | 2026-06-01 10:14:48.731632 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-45448 |
vulnerable | 2026-06-08 08:05:11.766798 |
ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
MEDIUM (4.3)
CWE-601 URL redirection to untrusted site ('open redirect')
Published: 2026-05-14T16:48:18.847Z
Updated: 2026-05-14T18:35:32.924Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12520 |
vulnerable | 2026-06-08 05:10:41.653981 |
Details available
An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at program startup. This results in deterministic session IDs being allocated for active user sessions. An attacker with foreknowledge of the operating system and standard library in use by the host running the service and the username of the user whose session they're targeting can abuse the deterministic random number generation in order to hijack the user's session, thus escalating their access.
Published: 2018-07-05T20:00:00.000Z
Updated: 2024-08-05T08:38:05.943Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7459 |
vulnerable | 2026-06-08 05:09:55.989128 |
Details available
ntopng before 3.0 allows HTTP Response Splitting.
Published: 2017-06-26T07:00:00.000Z
Updated: 2024-08-05T16:04:11.426Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7458 |
vulnerable | 2026-06-08 05:09:55.988818 |
Details available
The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty field that should have contained a hostname or IP address.
Published: 2017-06-26T23:00:00.000Z
Updated: 2024-08-05T16:04:11.287Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7416 |
vulnerable | 2026-06-08 05:09:55.889615 |
Details available
ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated.
Published: 2017-06-26T07:00:00.000Z
Updated: 2024-08-05T16:04:11.408Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5473 |
vulnerable | 2026-06-08 05:09:46.965745 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8368 |
vulnerable | 2026-06-08 05:07:03.774437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5464 |
vulnerable | 2026-06-08 05:05:47.987767 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.