Nmap - vulnerabilities (CVEs)

7 CVEs in 2 products, 0 in the last 30 days, newest from 2026-08-11.

Products

CVE-2026-72712 - CVSS 6.9 (medium), 2026-08-11: Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted…
CVE-2026-58058 - CVSS 6.9 (medium), 2026-06-28: Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer…
CVE-2017-18594 - CVSS 7.5 (high), 2019-08-29: nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n…
CVE-2019-11490 - CVSS 7.8 (high), 2019-04-24: An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcap_sendqueue_queue() or…
CVE-2018-15173 - CVSS 7.5 (high), 2018-08-08: Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted…
CVE-2018-1000161 - CVSS 5.7 (medium), 2018-04-18: nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can…
CVE-2013-4885 - CVSS 6.8 (medium), 2013-10-26: The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named"…