Page 3 of 23 results (0.003 seconds)

CVSS: 7.5EPSS: 31%CPEs: 5EXPL: 2

CVE-2008-0095 – Asterisk 1.x - BYE Message Remote Denial of Service

https://notcve.org/view.php?id=CVE-2008-0095

08 Jan 2008 — The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message with an Also (Also transfer) header, which triggers a NULL pointer dereference. El controlador de canal SIP de Asterisk Open Source 1.4.x versiones anteriores a 1.4.17, Business Edition versione... • https://www.exploit-db.com/exploits/30974 • CWE-399: Resource Management Errors •

CVSS: 9.8EPSS: 0%CPEs: 46EXPL: 0

CVE-2007-6430

https://notcve.org/view.php?id=CVE-2007-6430

20 Dec 2007 — Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-based registrations ("realtime") and host-based authentication, does not check the IP address when the username is correct and there is no password, which allows remote attackers to bypass authentication using a valid username. Asterisk Open Source 1.2.x anterior a 1.2.26 y 1.4.x anterior a 1.4.16, y Business Edition B.x.x anterior a B.2.3.6 y C.x.x an... • http://downloads.digium.com/pub/security/AST-2007-027.html • CWE-287: Improper Authentication •

CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0

CVE-2007-4281

https://notcve.org/view.php?id=CVE-2007-4281

09 Aug 2007 — Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the login field on the login page, and other unspecified vectors. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en KnowledgeTree Open Source 3.4 y 3.4.1 permite a atacantes remotos inyectar scripts web o HTML de su elección mediante el campo login en la página login, y otros vectores no especificados. • http://osvdb.org/36579 •