Vulnerabilities > Nmap

DATE CVE VULNERABILITY TITLE RISK
2019-08-29 CVE-2017-18594 Double Free vulnerability in Nmap 7.70
nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.
network
low complexity
nmap CWE-415
5.0
2019-04-24 CVE-2019-11490 Double Free vulnerability in Nmap Npcap 0.992
An issue was discovered in Npcap 0.992.
local
low complexity
nmap CWE-415
7.2
2018-08-08 CVE-2018-15173 Unspecified vulnerability in Nmap
Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted TCP-based service.
network
low complexity
nmap
5.0
2018-04-18 CVE-2018-1000161 Path Traversal vulnerability in Nmap
nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it.
network
nmap CWE-22
3.5
2013-10-26 CVE-2013-4885 Arbitrary File Write vulnerability in Nmap
The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.
network
nmap opensuse
6.8