snag.page

Every check · Open services

Known flaws

services/cves · What it finds is shown only to the site's owner.

What it checks

The CVEs Shodan's InternetDB matched to the software versions the site's addresses announce.

Why it matters

Bots look for servers running versions with published flaws. Shodan matches by the version announced, so a server patched by its distribution can still be listed.

How to fix it

  1. Update the server's operating system and the software it runs.
  2. Look up each CVE in your distribution's security tracker, which says whether its build is fixed.
  3. Turn off version banners, such as nginx's server_tokens off and Apache's ServerTokens Prod.

Check a site for this and everything else: snag.page. More on open services: Open services Open databases Open remote access Open container APIs