Cryptocat vulnerabilities

Newest CVEs

• CVE-2013-4106

  A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.

  Cryptocat · Cryptocat

  Medium6.1
• CVE-2013-4108

  Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.

  Cryptocat · Cryptocat

  Critical9.8
• CVE-2013-4109

  An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.

  Cryptocat · Message Handling

  Medium6.1
• CVE-2013-4110

  Cryptocat has an Unspecified Chat Participant User List Disclosure

  Cryptocat · Cryptocat

  Medium5.3
• CVE-2013-4107

  Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting

  Cryptocat · Cryptocat

  Medium6.1
• CVE-2013-2257

  Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness

  Cryptocat · Cryptocat

  High7.5
• CVE-2013-2258

  Cryptocat before 2.0.22 has Nickname User Impersonation

  Cryptocat · Cryptocat

  Medium5.3
• CVE-2013-2259

  Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview

  Cryptocat · Cryptocat

  Critical9.8
• CVE-2013-4105

  Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure

  Cryptocat · Cryptocat

  High7.5
• CVE-2013-2260

  Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness

  Cryptocat · Cryptocat

  Critical9.8