Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

chris russell vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2007-2297
The SIP channel driver (chan_sip) in Asterisk prior to 1.2.18 and 1.4.x prior to 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote malicious users to cause a denial of service (crash).
Asterisk Asterisk 1.2.0 Beta2Asterisk Asterisk 1.2.10Asterisk Asterisk 1.2.17Asterisk Asterisk 1.4.1Asterisk Asterisk 1.2.0 Beta1Asterisk Asterisk 1.2.15Asterisk Asterisk 1.2.16Asterisk Asterisk 1.2.11Asterisk Asterisk 1.2.12Asterisk Asterisk 1.4.2Asterisk Asterisk 1.4 BetaAsterisk Asterisk 1.2.13Asterisk Asterisk 1.2.14
NA
CVE-2007-1561
The channel driver in Asterisk prior to 1.2.17 and 1.4.x prior to 1.4.2 allows remote malicious users to cause a denial of service (crash) via a SIP INVITE message with an SDP containing one valid and one invalid IP address.
Asterisk Asterisk 1.2.15Asterisk Asterisk 1.2.16Asterisk Asterisk 1.4.1Asterisk Asterisk 1.2.14
NA
CVE-2007-3764
The Skinny channel driver (chan_skinny) in Asterisk prior to 1.2.22 and 1.4.x prior to 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit prior to 0.5.0, and s800i prior to 1.0.2 allows remote malicious users to cause a denial of service (cr...
Asterisk Asterisk 1.0.10Asterisk Asterisk 1.0.11Asterisk Asterisk 1.2.0 Beta2Asterisk Asterisk 1.2.10Asterisk Asterisk 1.2.5Asterisk Asterisk 1.2.6Asterisk Asterisk 1.4 BetaAsterisk Asterisk AAsterisk Asterisk 1.0.12Asterisk Asterisk 1.0.6Asterisk Asterisk 1.2.11Asterisk Asterisk 1.2.12Asterisk Asterisk 1.2.13Asterisk Asterisk 1.2.7Asterisk Asterisk 1.2.8Asterisk Asterisk B.1.3.2Asterisk Asterisk B.1.3.3Asterisk Asterisk 1.0Asterisk Asterisk 1.0.9Asterisk Asterisk 1.2.0 Beta1Asterisk Asterisk 1.2.16Asterisk Asterisk 1.2.17
NA
CVE-2007-3762
Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk prior to 1.2.22 and 1.4.x prior to 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit prior to 0.5.0, and s800i prior to 1.0.2 allows remote malicious users to ex...
Asterisk Asterisk 1.0.6Asterisk Asterisk 1.0.7Asterisk Asterisk 1.2.12Asterisk Asterisk 1.2.13Asterisk Asterisk 1.2.8Asterisk Asterisk 1.2.9Asterisk Asterisk B.1.3.3Asterisk Asterisk B.2.2.0Asterisk Asterisk 1.0Asterisk Asterisk 1.0.10Asterisk Asterisk 1.2.0 Beta1Asterisk Asterisk 1.0.11Asterisk Asterisk 1.0.12Asterisk Asterisk 1.2.10Asterisk Asterisk 1.2.11Asterisk Asterisk 1.2.5Asterisk Asterisk 1.2.6Asterisk Asterisk 1.2.7Asterisk Asterisk AAsterisk Asterisk B.1.3.2Asterisk Asterisk 1.2.0 Beta2Asterisk Asterisk 1.2.16
NA
CVE-2007-2294
The Manager Interface in Asterisk prior to 1.2.18 and 1.4.x prior to 1.4.3 allows remote malicious users to cause a denial of service (crash) by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dere...
Asterisk Asterisk 1.2.11Asterisk Asterisk 1.2.12Asterisk Asterisk 1.2.6Asterisk Asterisk 1.2.7Asterisk Asterisk 1.2.8Asterisk Asterisk 1.2.0 Beta2Asterisk Asterisk 1.2.10Asterisk Asterisk 1.2.17Asterisk Asterisk 1.2.5Asterisk Asterisk 1.2.13Asterisk Asterisk 1.2.14Asterisk Asterisk 1.2.9Asterisk Asterisk 1.4.1Asterisk Asterisk 1.2.0 Beta1Asterisk Asterisk 1.2.15Asterisk Asterisk 1.2.16Asterisk Asterisk 1.4.2Asterisk Asterisk 1.4 Beta
NA
CVE-2007-2488
The IAX2 channel driver (chan_iax2) in Asterisk prior to 20070504 does not properly null terminate data, which allows remote malicious users to trigger loss of transmitted data, and possibly obtain sensitive information (memory contents) or cause a denial of service (application ...
Asterisk Asterisk
NA
CVE-2007-1306
Asterisk 1.4 prior to 1.4.1 and 1.2 prior to 1.2.16 allows remote malicious users to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.
Digium Asterisk 1.2.12.1Digium Asterisk 1.2.13Digium Asterisk 1.2 Beta1Digium Asterisk 1.2 Beta2Digium Asterisk 1.2.11Digium Asterisk 1.2.12Digium Asterisk 1.2.8Digium Asterisk 1.2.9Digium Asterisk 1.2.0 Beta1Digium Asterisk 1.2.14Digium Asterisk 1.2.15Digium Asterisk 1.4.0Digium Asterisk 1.4.0 Beta1Digium Asterisk 1.4.0 Beta2Digium Asterisk 1.2.0 Beta2Digium Asterisk 1.2.10Digium Asterisk 1.2.6Digium Asterisk 1.2.7
NA
CVE-2007-3763
The IAX2 channel driver (chan_iax2) in Asterisk prior to 1.2.22 and 1.4.x prior to 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit prior to 0.5.0, and s800i prior to 1.0.2 allows remote malicious users to cause a denial of service (crash)...
Asterisk Asterisk 1.0Asterisk Asterisk 1.2.0 Beta1Asterisk Asterisk 1.2.0 Beta2Asterisk Asterisk 1.2.16Asterisk Asterisk 1.2.17Asterisk Asterisk 1.4.2Asterisk Asterisk 1.0.8Asterisk Asterisk 1.0.9Asterisk Asterisk 1.2.14Asterisk Asterisk 1.2.15Asterisk Asterisk 1.2.9Asterisk Asterisk 1.4.1Asterisk Asterisknow Beta 5Asterisk Asterisknow Beta 6Asterisk Asterisk 1.4.4 2007-04-27Asterisk Asterisk Appliance Developer KitAsterisk Asterisk 1.0.12Asterisk Asterisk 1.0.6Asterisk Asterisk 1.0.7Asterisk Asterisk 1.2.12Asterisk Asterisk 1.2.13Asterisk Asterisk 1.2.7
NA
CVE-2011-4829
SQL injection vulnerability in the com_listing component in Barter Sites component 1.3 for Joomla! allows remote malicious users to execute arbitrary SQL commands via the category_id parameter to index.php.
Barter-sites Com Listing 1.3
NA
CVE-2011-4830
Multiple cross-site scripting (XSS) vulnerabilities in the com_listing component in Barter Sites component 1.3 for Joomla! allow remote authenticated users to inject arbitrary web script or HTML via the (1) listing_title, (2) description, (3) homeurl (aka Website Address), (4) pa...
Barter-sites Com Listing 1.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook