Browse CVEs

CRITICAL 9.8 CVE-2013-4108 Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors. Cryptocat No fix yet Fix from $2,3002019-11-14 MEDIUM 6.1 CVE-2013-4106 A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22. Cryptocat 2.0.22+ Fix from $1,6002019-11-14 MEDIUM 6.1 CVE-2013-4109 An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165. Cryptocat No fix yet Fix from $1,6002019-11-14 MEDIUM 6.1 CVE-2013-4107 Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting Cryptocat 2.0.22+ Fix from $1,6002019-11-05 MEDIUM 5.3 CVE-2013-4110 Cryptocat has an Unspecified Chat Participant User List Disclosure Cryptocat No fix yet Fix from $1,6002019-11-05 HIGH 7.5 CVE-2013-4105 Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure Cryptocat 2.0.22+ Fix from $1,9502019-11-04 CRITICAL 9.8 CVE-2013-2259 Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview Cryptocat 2.0.22+ Fix from $2,3002019-11-04 CRITICAL 9.8 CVE-2013-2260 Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness Cryptocat 2.0.22+ Fix from $2,3002019-11-04 HIGH 7.5 CVE-2013-2257 Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness Cryptocat 2.0.42+ Fix from $1,9502019-11-04 MEDIUM 5.3 CVE-2013-2258 Cryptocat before 2.0.22 has Nickname User Impersonation Cryptocat 2.0.22+ Fix from $1,6002019-11-04 HIGH 7.5 CVE-2013-2261EPSS 12% Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure Cryptocat 2.0.22+ Fix from $1,9502019-11-04 HIGH 7.5 CVE-2013-2262 Cryptocat strophe.js before 2.0.22 has information disclosure Cryptocat 2.0.22+ Fix from $1,9502019-11-04 HIGH 7.5 CVE-2013-4104 Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol Cryptocat 2.0.22+ Fix from $1,9502019-11-04 CRITICAL 9.8 CVE-2013-4103EPSS 7% Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input Cryptocat 2.0.22+ Fix from $2,3002019-11-04 CRITICAL 9.1 CVE-2013-4102 Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness Cryptocat 2.0.22+ Fix from $2,3002019-11-04 HIGH 7.5 CVE-2013-4100 Cryptocat before 2.0.22 has Remote Denial of Service via username Cryptocat 2.0.22+ Fix from $1,9502019-11-04 MEDIUM 5.3 CVE-2013-4101 Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness Cryptocat 2.0.22+ Fix from $1,6002019-11-04