VendorsCryptocat Projectcryptocatany version
Vulnerabilities

Cryptocat Project Cryptocat any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

15CVEs
CVE-2013-4103
Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input
Published 2019-11-04 · Modified
9.81 PoCEPSS 0.069
CVE-2013-2259
Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview
Published 2019-11-04 · Modified
9.8EPSS 0.037
CVE-2013-2260
Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness
Published 2019-11-04 · Modified
9.8EPSS 0.022
CVE-2013-4102
Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness
Published 2019-11-04 · Modified
9.1EPSS 0.020
CVE-2013-2261
Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure
Published 2019-11-04 · Modified
7.51 PoCEPSS 0.116
CVE-2013-4100
Cryptocat before 2.0.22 has Remote Denial of Service via username
Published 2019-11-04 · Modified
7.5EPSS 0.024
CVE-2013-2257
Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness
Published 2019-11-04 · Modified
7.5EPSS 0.020
CVE-2013-2262
Cryptocat strophe.js before 2.0.22 has information disclosure
Published 2019-11-04 · Modified
7.5EPSS 0.019
CVE-2013-4105
Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure
Published 2019-11-04 · Modified
7.5EPSS 0.011
CVE-2013-4104
Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol
Published 2019-11-04 · Modified
7.5EPSS 0.008
CVE-2013-4106
A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.
Published 2019-11-14 · Modified
6.1EPSS 0.015
CVE-2013-4107
Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting
Published 2019-11-05 · Modified
6.1EPSS 0.011
CVE-2013-4110
Cryptocat has an Unspecified Chat Participant User List Disclosure
Published 2019-11-05 · Modified
5.3EPSS 0.020
CVE-2013-2258
Cryptocat before 2.0.22 has Nickname User Impersonation
Published 2019-11-04 · Modified
5.3EPSS 0.014
CVE-2013-4101
Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness
Published 2019-11-04 · Modified
5.3EPSS 0.014