11 CVEs matched to NTOP by name in NVD, none on CISA's Known Exploited list.
Back to the NTOP profile · Alternatives to NTOP · CVE RSS feed
Likely-exploited estimates here rest on a median of 2 EPSS observations per CVE — too little history to read as a trend yet. It deepens daily as scores are collected.
ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.
The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon cr…
Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injecte…
ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to adm…
| Year | Critical | High | Medium | Low | Unscored | Total |
|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 0 | 0 | 0 | 2 |
| 2021 | 0 | 1 | 0 | 0 | 0 | 1 |
| 2015 | 0 | 0 | 1 | 0 | 0 | 1 |
| 2014 | 0 | 0 | 2 | 0 | 0 | 2 |
| 2009 | 0 | 0 | 1 | 0 | 0 | 1 |
| 2005 | 0 | 0 | 1 | 0 | 0 | 1 |
| 2002 | 0 | 1 | 0 | 0 | 0 | 1 |
| 2000 | 0 | 1 | 1 | 0 | 0 | 2 |
EPSS is FIRST's estimate of the chance a CVE is exploited in the next 30 days. It measures likelihood, not impact.
| CVE | EPSS | Percentile |
|---|---|---|
| CVE-2000-0705 | 8.0% | 95% |
| CVE-2009-2732 | 7.3% | 94% |
| CVE-2000-0706 | 5.9% | 93% |
| CVE-2015-8368 | 5.1% | 92% |
| CVE-2014-5464 | 4.5% | 91% |
| CVE-2002-0412 | 4.2% | 91% |
| CVE-2014-4165 | 2.1% | 81% |
| CVE-2021-36082 | 1.8% | 78% |
| CVE-2005-3387 | 0.9% | 58% |
| CVE-2026-82412 | 0.7% | 50% |
ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, the vulnerability-scan endpoints scripts/lua/rest/v2/add/host/to_scan.lua and scripts/lua/rest/v2/exec/host/schedule_…
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overf…
ntop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.
ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/password_reset.lua.
Cross-site scripting (XSS) vulnerability in the nDPI traffic classification library in ntopng (aka ntop) before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host h…
Cross-site scripting (XSS) vulnerability in ntop allows remote attackers to inject arbitrary web script or HTML via the title parameter in a list action to plugins/rrdPlugin.
The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header th…
The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbit…
Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via…
ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.