Browse CVEs

HIGH 7.5 CVE-2021-28040 An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of opening and closing XML tag… Ossec No fix yet Fix from $1,9502021-03-05 CRITICAL 9.8 CVE-2020-8447 In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during process… Ossec after 3.5.0 Fix from $2,3002020-01-30 MEDIUM 5.5 CVE-2020-8448 In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a denial of service (NULL point… Ossec after 3.5.0 Fix from $1,6002020-01-30 CRITICAL 9.8 CVE-2020-8443 In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to an off-by-one heap-based buffer… Ossec after 3.5.0 Fix from $2,3002020-01-30 CRITICAL 9.8 CVE-2020-8444 In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during process… Ossec after 3.5.0 Fix from $2,3002020-01-30 CRITICAL 9.8 CVE-2020-8445 In OSSEC-HIDS 2.7 through 3.5.0, the OS_CleanMSG function in ossec-analysisd doesn't remove or encode terminal control characters or newlines from pr… Ossec after 3.5.0 Fix from $2,3002020-01-30 HIGH 8.8 CVE-2020-8442 In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a heap-based buffer overflow in… Ossec after 3.5.0 Fix from $1,9502020-01-30 MEDIUM 5.5 CVE-2020-8446 In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to path traversal (with write acce… Ossec after 3.5.0 Fix from $1,6002020-01-30 HIGH 7.8 CVE-2018-19666 The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access t… Ossec after 3.1.0 Fix from $1,9502018-11-29 HIGH 7.0 CVE-2015-3222 syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root. Ossec No fix yet Fix from $1,9502017-09-07 MEDIUM 6.1 CVE-2016-4847 Cross-site scripting (XSS) vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML… Web Ui after 0.8 Fix from $1,6002017-04-20 HIGH 7.2 CVE-2014-5284 host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, which allows local users to modi… Ossec after 2.8.0 Fix from $1,9502014-12-02