AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 23 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~51 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.
OSSEC, dating to 2004, is a widely used open-source host-based intrusion detection system for log analysis and file-integrity monitoring.
Known CVEs (23)4 newAbout this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.
Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious cluster workers to read arbitrary files via unvalidated filename values. Attack…
Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated users with manager:update…
Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler.process_files_from_worker allowing a cluster worker to overwrite protected master files. Atta…
OSSEC is a multiplatform, open-source host-based intrusion detection system (HIDS) that provides log analysis, file-integrity monitoring, malware detection, active response, and compliance auditing. It runs on Windows, Linux, FreeBSD, OpenBSD, Unix, and macOS, and is distributed as free source code or pre-compiled binaries.
Strengths
open-source host-based intrusion detection
multiplatform support (Windows, Linux, macOS, etc.)
free to use with no cost
file-integrity monitoring and malware detection
active response and compliance auditing
Pricing & packaging
Free to use; OSSEC+ free with registration
News about OSSEC (5)Where this comes fromItems from OSSEC's own public feeds — changelog, blog, GitHub releases or status page — that name OSSEC in the headline or summary. News from OSSEC that does not name this product is on the vendor's page instead. Each headline links to the original source; nothing here is written by 0-Doubt.
