Vulnerability index

Browse CVEs

17 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Cryptocat CRITICAL 9.8
CVE-2013-4108

Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.

No fix yet
Fix from $2,300 2019-11-14
Cryptocat MEDIUM 6.1
CVE-2013-4106

A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.

Fix: 2.0.22+
Fix from $1,600 2019-11-14
Cryptocat MEDIUM 6.1
CVE-2013-4109

An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.

No fix yet
Fix from $1,600 2019-11-14
Cryptocat MEDIUM 6.1
CVE-2013-4107

Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting

Fix: 2.0.22+
Fix from $1,600 2019-11-05
Cryptocat MEDIUM 5.3
CVE-2013-4110

Cryptocat has an Unspecified Chat Participant User List Disclosure

No fix yet
Fix from $1,600 2019-11-05
Cryptocat HIGH 7.5
CVE-2013-4105

Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure

Fix: 2.0.22+
Fix from $1,950 2019-11-04
Cryptocat CRITICAL 9.8
CVE-2013-2259

Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview

Fix: 2.0.22+
Fix from $2,300 2019-11-04
Cryptocat CRITICAL 9.8
CVE-2013-2260

Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness

Fix: 2.0.22+
Fix from $2,300 2019-11-04
Cryptocat HIGH 7.5
CVE-2013-2257

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness

Fix: 2.0.42+
Fix from $1,950 2019-11-04
Cryptocat MEDIUM 5.3
CVE-2013-2258

Cryptocat before 2.0.22 has Nickname User Impersonation

Fix: 2.0.22+
Fix from $1,600 2019-11-04
Cryptocat HIGH 7.5
CVE-2013-2261EPSS 12%

Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure

Fix: 2.0.22+
Fix from $1,950 2019-11-04
Cryptocat HIGH 7.5
CVE-2013-2262

Cryptocat strophe.js before 2.0.22 has information disclosure

Fix: 2.0.22+
Fix from $1,950 2019-11-04
Cryptocat HIGH 7.5
CVE-2013-4104

Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol

Fix: 2.0.22+
Fix from $1,950 2019-11-04
Cryptocat CRITICAL 9.8
CVE-2013-4103EPSS 7%

Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input

Fix: 2.0.22+
Fix from $2,300 2019-11-04
Cryptocat CRITICAL 9.1
CVE-2013-4102

Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness

Fix: 2.0.22+
Fix from $2,300 2019-11-04
Cryptocat HIGH 7.5
CVE-2013-4100

Cryptocat before 2.0.22 has Remote Denial of Service via username

Fix: 2.0.22+
Fix from $1,950 2019-11-04
Cryptocat MEDIUM 5.3
CVE-2013-4101

Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness

Fix: 2.0.22+
Fix from $1,600 2019-11-04