NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 56305 | CVE-2007-4174 | Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid authentication, as demonstrated by an HTML form (1) hosted on a web site or (2) injected by a Tor exit node. | 2 | 5.8 | Medium | 2017-01-07 | 2011-03-17 | View | |
| 5170 | CVE-2008-5397 | Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process. | 2 | 7.2 | High | 2017-01-03 | 2011-03-07 | View | |
| 5171 | CVE-2008-5398 | Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination hostname of a refused stream. | 2 | 9.3 | High | 2017-01-03 | 2011-03-07 | View | |
| 48251 | CVE-2009-0939 | Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0. | 2 | 10 | High | 2017-01-07 | 2009-04-18 | View | |
| 49670 | CVE-2009-2425 | Tor before 0.2.0.35 allows remote attackers to cause a denial of service (application crash) via a malformed router descriptor. | 2 | 5 | Medium | 2017-01-07 | 2009-07-13 | View |
Page 15186 of 17672, showing 5 records out of 88360 total, starting on record 75926, ending on 75930
