CVE-2013-4110

Cryptocat has an Unspecified Chat Participant User List Disclosure...

CVE-2013-4107

CVE-2013-4107 concerns Cryptocat prior to 2.0.22, where the vulnerability lies in cryptocat.js: the function handlePresence() enables a cross-site scripting (XSS) condition. The impact is client-side code execution under attacker-controlled input, reported consistently across multiple sources. Th...

CVE-2013-4107

Cryptocat before 2.0.22: cryptocat.js handlePresence has cross site scripting...

CVE-2013-4105

Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure...

CVE-2013-2259

Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview...

CVE-2013-2257

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness...

CVE-2013-2260

Cryptocat before 2.0.22: Cryptocat.random Function Array Key has Entropy Weakness...

CVE-2013-2258

Cryptocat before 2.0.22 has Nickname User Impersonation...

Information disclosure

Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure...

Information disclosure

Cryptocat before 2.0.22 has Nickname User Impersonation...

Design/Logic Flaw

Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview...

Design/Logic Flaw

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness...

Design/Logic Flaw

Cryptocat before 2.0.22: Cryptocat.random Function Array Key has Entropy Weakness...

CVE-2013-2257

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness...

CVE-2013-2257

CVE-2013-2257 affects Cryptocat prior to version 2.0.42. The issue is described as a Group Chat ECC Private Key Generation Brute Force Weakness, indicating weakness in how ECC private keys for group chats are generated. The public descriptions in connected records consistently reference Cryptocat

CVE-2013-2258

CVE-2013-2258 affects Cryptocat before 2.0.22, described consistently across multiple connected records as allowing Nickname User Impersonation . The available documents identify the affected product and the basic vulnerability class but do not provide detailed root cause, affected components, ex...

CVE-2013-2258

Cryptocat before 2.0.22 has Nickname User Impersonation...

CVE-2013-2259

Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview...

CVE-2013-2259

CVE-2013-2259 affects Cryptocat prior to 2.0.22. The connected records confirm an Arbitrary Code Execution vulnerability in the Cryptocat Firefox Conversation Overview context, with the same pre-2.0.22 version exposure cited across multiple sources (CNVD, Red Hat, NVD, CVE lists). The exact root ...

CVE-2013-4105

Cryptocat before version 2.0.22 is affected by an information disclosure vulnerability in the Multiparty Encryption Scheme. The issue, described across multiple sources, stems from errors during operation/configuration of the networked Cryptocat setup, allowing disclosure of sensitive information...