| Bug | jessie | stretch | buster | sid | Description |
|---|
| CVE-2018-12520 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG invo ... |
| CVE-2017-7459 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | ntopng before 3.0 allows HTTP Response Splitting. |
| CVE-2017-7458 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | The NetworkInterface::getHost function in NetworkInterface.cpp in ntop ... |
| CVE-2017-7416 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | ntopng before 3.0 allows XSS because GET and POST parameters are impro ... |
| CVE-2017-5473 | vulnerable (no DSA) | fixed | fixed | fixed | Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 ... |
| CVE-2015-8368 | vulnerable (no DSA) | fixed | fixed | fixed | ntopng (aka ntop) before 2.2 allows remote authenticated users to chan ... |