NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 49670 | CVE-2009-2425 | Tor before 0.2.0.35 allows remote attackers to cause a denial of service (application crash) via a malformed router descriptor. | 2 | 5 | Medium | 2017-01-07 | 2009-07-13 | View | |
| 48251 | CVE-2009-0939 | Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0. | 2 | 10 | High | 2017-01-07 | 2009-04-18 | View | |
| 5171 | CVE-2008-5398 | Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination hostname of a refused stream. | 2 | 9.3 | High | 2017-01-03 | 2011-03-07 | View | |
| 5170 | CVE-2008-5397 | Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process. | 2 | 7.2 | High | 2017-01-03 | 2011-03-07 | View | |
| 56305 | CVE-2007-4174 | Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid authentication, as demonstrated by an HTML form (1) hosted on a web site or (2) injected by a Tor exit node. | 2 | 5.8 | Medium | 2017-01-07 | 2011-03-17 | View |
Page 2487 of 17672, showing 5 records out of 88360 total, starting on record 12431, ending on 12435
