Cryptocat Project
Cryptocat Project Cryptocat: vulnerabilidades y CVE
Cryptocat Project Cryptocat tiene 17 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 5 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE17
Últimos 12 meses0
Críticas5
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2013-4108 | Crítica (9.8) | 1.5% | — | 14 nov 2019 | Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors. |
| CVE-2013-4106 | Media (6.1) | 1.5% | — | 14 nov 2019 | A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22. |
| CVE-2013-4109 | Media (6.1) | 1.7% | — | 14 nov 2019 | An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165. |
| CVE-2013-4110 | Media (5.3) | 2.0% | — | 5 nov 2019 | Cryptocat has an Unspecified Chat Participant User List Disclosure |
| CVE-2013-4107 | Media (6.1) | 1.1% | — | 5 nov 2019 | Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting |
| CVE-2013-4105 | Alta (7.5) | 1.1% | — | 4 nov 2019 | Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure |
| CVE-2013-2260 | Crítica (9.8) | 2.2% | — | 4 nov 2019 | Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness |
| CVE-2013-2259 | Crítica (9.8) | 3.7% | — | 4 nov 2019 | Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview |
| CVE-2013-2258 | Media (5.3) | 1.4% | — | 4 nov 2019 | Cryptocat before 2.0.22 has Nickname User Impersonation |
| CVE-2013-2257 | Alta (7.5) | 2.0% | — | 4 nov 2019 | Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness |
| CVE-2013-4104 | Alta (7.5) | 0.76% | — | 4 nov 2019 | Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol |
| CVE-2013-2262 | Alta (7.5) | 1.9% | — | 4 nov 2019 | Cryptocat strophe.js before 2.0.22 has information disclosure |
| CVE-2013-2261 | Alta (7.5) | 12% | — | 4 nov 2019 | Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure |
| CVE-2013-4103 | Crítica (9.8) | 6.9% | — | 4 nov 2019 | Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input |
| CVE-2013-4102 | Crítica (9.1) | 2.0% | — | 4 nov 2019 | Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness |
| CVE-2013-4101 | Media (5.3) | 1.4% | — | 4 nov 2019 | Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness |
| CVE-2013-4100 | Alta (7.5) | 2.4% | — | 4 nov 2019 | Cryptocat before 2.0.22 has Remote Denial of Service via username |