Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2635▼ 214 respecto a la semana anterior
Críticas / altas1385▲ 153 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior
17 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.5% | — | Cryptocat Project Cryptocat | 14/11/2019 | 16/6/2026 | Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors. | |
| Modificada | Media (6.1) | 1.5% | — | Cryptocat Project Cryptocat | 14/11/2019 | 16/6/2026 | A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22. | |
| Modificada | Media (6.1) | 1.7% | — | Cryptocat Project Cryptocat | 14/11/2019 | 16/6/2026 | An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165. | |
| Modificada | Media (5.3) | 2.0% | — | Cryptocat Project Cryptocat | 5/11/2019 | 16/6/2026 | Cryptocat has an Unspecified Chat Participant User List Disclosure | |
| Modificada | Media (6.1) | 1.1% | — | Cryptocat Project Cryptocat | 5/11/2019 | 16/6/2026 | Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting | |
| Modificada | Alta (7.5) | 1.1% | — | Cryptocat Project Cryptocat | 4/11/2019 | 16/6/2026 | Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure | |
| Modificada | Crítica (9.8) | 2.2% | — | Cryptocat Project Cryptocat | 4/11/2019 | 16/6/2026 | Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness | |
| Modificada | Crítica (9.8) | 3.7% | — | Cryptocat Project Cryptocat | 4/11/2019 | 16/6/2026 | Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview | |
| Modificada | Media (5.3) | 1.4% | — | Cryptocat Project Cryptocat | 4/11/2019 | 16/6/2026 | Cryptocat before 2.0.22 has Nickname User Impersonation | |
| Modificada | Alta (7.5) | 2.0% | — | Cryptocat Project Cryptocat | 4/11/2019 | 16/6/2026 | Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness | |
| Modificada | Alta (7.5) | 0.76% | — | Cryptocat Project Cryptocat | 4/11/2019 | 16/6/2026 | Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol | |
| Modificada | Alta (7.5) | 1.9% | — | Cryptocat Project Cryptocat | 4/11/2019 | 16/6/2026 | Cryptocat strophe.js before 2.0.22 has information disclosure | |
| Modificada | Alta (7.5) | 12% | — | Cryptocat Project Cryptocat | 4/11/2019 | 16/6/2026 | Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure | |
| Modificada | Crítica (9.8) | 6.9% | — | Cryptocat Project Cryptocat | 4/11/2019 | 16/6/2026 | Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input | |
| Modificada | Crítica (9.1) | 2.0% | — | Cryptocat Project Cryptocat | 4/11/2019 | 16/6/2026 | Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness | |
| Modificada | Media (5.3) | 1.4% | — | Cryptocat Project Cryptocat | 4/11/2019 | 16/6/2026 | Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness | |
| Modificada | Alta (7.5) | 2.4% | — | Cryptocat Project Cryptocat | 4/11/2019 | 16/6/2026 | Cryptocat before 2.0.22 has Remote Denial of Service via username |