CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

311 matches found

CVE•added 2008/04/23 12:00 a.m.•108 views

CVE-2008-1897

The CVE-2008-1897 issue affects the IAX2 channel driver in Asterisk Open Source (various 1.0.x, 1.2.x before 1.2.28, 1.4.x before 1.4.19.1; AsteriskNOW; Business Editions; and s800i prior to listed versions). The vulnerability arises when unauthenticated calls are allowed and the ACK response doe...

4.3CVSS6.5AI score0.02743EPSS

SaveExploits1References27Affected Software5

Tenable Nessus•added 2008/04/17 12:00 a.m.•37 views

GLSA-200804-13 : Asterisk: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-13 Asterisk: Multiple vulnerabilities Asterisk upstream developers reported multiple vulnerabilities: The Call Detail Record Postgres logging engine cdrpgsql does not correctly escape the ANI and DNIS arguments before using...

8.8CVSS6.3AI score0.02811EPSS

SaveExploits2References4

Tenable Nessus•added 2008/03/21 12:00 a.m.•37 views

Debian DSA-1525-1 : asterisk - several vulnerabilities

Several remote vulnerabilities have been discovered in Asterisk, a free software PBX and telephony toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6430 Tilghman Lesher discovered that database-based registrations are insufficiently validate...

8.8CVSS5.6AI score0.03222EPSS

SaveExploits2References8

NVD•added 2008/03/20 12:44 a.m.•19 views

CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2;...

8.8CVSS6.4AI score0.02327EPSS

SaveExploits1References17

Prion•added 2008/03/20 12:44 a.m.•25 views

Code injection

8.8CVSS6.9AI score0.02327EPSS

SaveExploits1References17Affected Software6

OSV•added 2008/03/20 12:44 a.m.•9 views

CVE-2008-1332

6.3AI score

SaveExploits0References17

OSV•added 2008/03/20 12:44 a.m.•10 views

DEBIAN-CVE-2008-1332

8.8CVSS6.4AI score0.02327EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2008/03/20 12:00 a.m.•5 views

CVE-2008-1332: Undefined Security Weakness

8.8CVSS6AI score0.02327EPSS

SaveExploits1References2

Debian CVE•added 2008/03/20 12:00 a.m.•45 views

CVE-2008-1332

8.8CVSS6.2AI score0.02327EPSS

SaveExploits1

CVE•added 2008/03/20 12:00 a.m.•105 views

CVE-2008-1332

CVE-2008-1332 affects Asterisk and several build variants (1.2.x up to 1.2.27; 1.4.x up to 1.4.18.1 and 1.4.19-rc3; AsteriskNOW, Business/Community editions, Appliance Kit, s800i) and allows remote attackers to access the SIP channel driver via a crafted From header, bypassing authentication. Con...

8.8CVSS6.2AI score0.02327EPSS

SaveExploits1References17Affected Software6

securityvulns•added 2008/03/19 12:00 a.m.•68 views

AST-2008-003: Unauthenticated calls allowed from SIP channel driver

Asterisk Project Security Advisory - AST-2008-003 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Unauthenticated calls allowed from SIP channel | | | driver |...

8.8CVSS0.8AI score0.02327EPSS

SaveExploits1

OpenVAS•added 2008/01/17 12:00 a.m.•22 views

Debian: Security Advisory (DSA-1229-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.86453EPSS

SaveExploits2References3

OpenVAS•added 2008/01/17 12:00 a.m.•28 views

Debian: Security Advisory (DSA-1126)

7.5CVSS6.7AI score0.04293EPSS

SaveExploits0References3

OpenVAS•added 2008/01/17 12:00 a.m.•32 views

Debian Security Advisory DSA 1229-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 1229-1. Adam Boileau discovered an integer overflow in the Skinny channel driver in Asterisk, an Open Source Private Branch Exchange or telephone system, as used by Cisco SCCP phones, which allows remote attackers to...

7.5CVSS1.1AI score0.86453EPSS

SaveExploits2

UbuntuCve•added 2008/01/08 2:46 a.m.•19 views

CVE-2008-0095

The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service daemon crash...

5CVSS5.9AI score0.25423EPSS

SaveExploits3References1

OSV•added 2008/01/08 2:46 a.m.•8 views

DEBIAN-CVE-2008-0095

5CVSS6.7AI score0.25423EPSS

SaveExploits3References1

CVE•added 2008/01/08 2:00 a.m.•83 views

CVE-2008-0095

Asterisk Open Source 1.4.x (and related editions) is affected by a remote DoS via a crafted BYE message containing an Also header, triggering a NULL pointer dereference and daemon crash. The vulnerable range includes 1.4.x before 1.4.17, with affected builds in Business Edition before C.1.0-beta8...

5CVSS6.3AI score0.25423EPSS

SaveExploits3References12Affected Software5

Cvelist•added 2008/01/08 2:00 a.m.•42 views

CVE-2008-0095

6.3AI score0.25423EPSS

SaveExploits3References12

Rapid7 Vulnerability Database (full)•added 2008/01/08 12:00 a.m.•2 views

CVE-2008-0095: Undefined Security Weakness

5CVSS5.7AI score0.25423EPSS

SaveExploits3References2

securityvulns•added 2008/01/03 12:00 a.m.•32 views

AST-2008-001: Crash from transfer using BYE with Also header

Asterisk Project Security Advisory - AST-2008-001 +------------------------------------------------------------------------+ | Product | Asterisk | |---------------------+--------------------------------------------------| | Summary | Remote Crash Vulnerability in SIP channel driver |...

0.4AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by