144 matches found
CVE-2013-4104
Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol...
CVE-2013-4104
Cryptocat prior to version 2.0.22 has weak encryption in the Socialist Millionnaire Protocol, leading to potential information disclosure. The vulnerability impacts Cryptocat’s crypto protocol and is fixed in 2.0.22 per multiple sources (e.g., CNVD, RH, NVD). In the cited reports, exploitation le...
CVE-2013-4103
Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input...
CVE-2013-4101
Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness...
CVE-2013-4102
Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...
CVE-2013-4100
Cryptocat before 2.0.22 has Remote Denial of Service via username...
Design/Logic Flaw
Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input...
Denial of service
Cryptocat before 2.0.22 has Remote Denial of Service via username...
Code injection
Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...
Hardcoded credentials
Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness...
CVE-2013-4100
Cryptocat is affected by a remote denial-of-service vulnerability in versions before 2.0.22, exploitable via the username parameter. Impact per sources is a denial of service without requiring user interaction. The issue is fixed by upgrading to 2.0.22 or later. Affected product: Cryptocat (open-...
CVE-2013-4100
Cryptocat before 2.0.22 has Remote Denial of Service via username...
CVE-2013-4101
Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness...
CVE-2013-4101
Cryptocat (versions before 2.0.22) is affected by CVE-2013-4101 due to a Link Markup Decorator HTML Handling Weakness. The vulnerability enables the generation of invalid HTML code within the application’s markup processing. Red Hat and CNVD entries corroborate the same affected version range and...
CVE-2013-4102
CVE-2013-4102 affects Cryptocat prior to 2.0.22 due to a weakness in strophe.js Math.random() RNG. Public sources in the provided documents describe it as a randomness weakness that can impact confidentiality and integrity (per NVD CVSSv2 6.4, CVSSv3.1 9.1). Connected records repeatedly reference...
CVE-2013-4102
Cryptocat before 2.0.22 strophe.js Math.random Random Number Generator Weakness...
CVE-2013-4103
Cryptocat prior to 2.0.22 is vulnerable to Remote Script Injection caused by improper sanitization of user input. Affected software: Cryptocat (versions before 2.0.22). Impact per sources: potential arbitrary script execution in the context of the application. Remediation: upgrade to Cryptocat 2....
CVE-2013-4103
Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input...
