TR
Product
Transmission
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add Transmission to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-0748 | 9.8 | Oct 30 | Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link Affected: before 1.92 |
| CVE-2018-5702 | 8.8 | Jan 15 | Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary… Affected: through 2.92 |
| CVE-2010-0012 | 8.8 | Jan 8 | Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a Affected: 1.22; 1.34; 1.75; 1.76 |
| CVE-2018-10756 | 7.8 | May 15 | Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a… Affected: before 3.00 |
| CVE-2010-0749 | 5.3 | Oct 30 | Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame Affected: before 1.92 |
| CVE-2014-4909 | – | Jul 29 | Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute… Affected: through 2.83; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2012-6129 | – | Apr 3 | Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service (crash) and… Affected: through 2.73; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2012-4037 | – | Aug 15 | Multiple cross-site scripting (XSS) vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the (1)… Affected: through 2.60; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2010-1853 | – | May 7 | Multiple stack-based buffer overflows in the tr_magnetParse function in libtransmission/magnet.c in Transmission 1.91 allow remote attackers to cause a denial of service (crash)… Affected: 1.91 |
| CVE-2009-1757 | – | May 22 | Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via… Affected: 1.50; 1.51; 1.52; 1.60 |
Showing 10