Lucene search

K

5 matches found

CVE
CVE
added 2019/05/28 3:29 a.m.92 views

CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting.

4.3CVSS4.5AI score0.00736EPSS
CVE
CVE
added 2019/06/30 2:15 p.m.63 views

CVE-2019-13075

Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a beha...

5.3CVSS5AI score0.00146EPSS
CVE
CVE
added 2018/09/13 4:29 a.m.59 views

CVE-2018-16983

NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value.

9.8CVSS9.3AI score0.00412EPSS
CVE
CVE
added 2018/09/14 9:29 p.m.43 views

CVE-2017-16639

Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541. User interaction is required to trigger this vulnerability.

4.3CVSS5.7AI score0.01522EPSS
CVE
CVE
added 2021/09/24 7:15 p.m.37 views

CVE-2021-39246

Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits to v2 onion addresses. Exact timestamps of these onion-service visits are logged locally, and an attacker might be able to compare them to timestamp data collected by the destina...

6.1CVSS6.1AI score0.00108EPSS