NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 56228 | CVE-2007-4097 | Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attackers to obtain sensitive information, contrary to specifications. | 2 | 6.4 | Medium | 2017-01-07 | 2011-03-07 | View | |
| 56229 | CVE-2007-4098 | Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams. | 2 | 5.8 | Medium | 2017-01-07 | 2011-03-07 | View | |
| 56230 | CVE-2007-4099 | Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks. | 2 | 5.8 | Medium | 2017-01-07 | 2011-03-07 | View | |
| 55319 | CVE-2007-3165 | Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers. | 2 | 5 | Medium | 2017-01-07 | 2011-03-07 | View | |
| 62097 | CVE-2006-3419 | Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes, and seeds the entropy value at start-up with 160-bit chunks without reseeding, which makes it easier for attackers to conduct brute force guessing attacks. | 2 | 5 | Medium | 2016-12-20 | 2008-09-05 | View |
Page 2488 of 17672, showing 5 records out of 88360 total, starting on record 12436, ending on 12440
