Known vulnerabilities in Tor - page 2

Software: Tor
Software CPE: cpe:2.3:a:tor_eff_org:tor:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 53
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Tor Tor is affected by 53 known vulnerabilities: 1 high, 29 medium, 23 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34151 - Memory corruption
CVE-2020-15572
CWE-119 Medium
No
No
- 15.07.2020 SB2020071542
SB20200716157
SB20200716158
and 1 more
#VU34852 - Improper input validation
CVE-2015-2928
CWE-20 Medium
No
No
0.2.6.7 24.01.2020 SB2020012426
SB2015070607
SB2015040702
and 4 more
#VU34853 - Improper input validation
CVE-2015-2929
CWE-20 Medium
No
No
0.2.6.7 24.01.2020 SB2020012426
SB2015070607
SB2015040702
and 4 more
#VU37868 - Improper input validation
CVE-2017-8819
CWE-20 Medium
No
No
0.3.1.9 03.12.2017 SB2017120304
SB2017121607
SB2017120305
and 3 more
#VU37869 - Improper input validation
CVE-2017-8822
CWE-20 Low
No
No
0.3.1.9 03.12.2017 SB2017120304
SB2017121607
SB2017120305
and 3 more
#VU38653 - Improper input validation
CVE-2017-11565
CWE-20 Medium
No
No
- 23.07.2017 SB2017072303
#VU31417 - Reachable Assertion
CVE-2017-0375
CWE-617 Medium
No
No
0.3.0.8 09.06.2017 SB2017060910
SB20170613104
SB2017092916
and 2 more
#VU39954 - Memory corruption
CVE-2016-8860
CWE-119 Medium
No
No
- 04.01.2017 SB2017010406
SB2016122405
SB2016102117
and 4 more
#VU41438 - Improper input validation
CVE-2014-5117
CWE-20 Medium
No
No
- 30.07.2014 SB2014073002
SB2014073106
#VU42081 - Improper input validation
CVE-2012-2249
CWE-20 Low
No
No
- 03.02.2014 SB2014020303
SB2014102219
#VU42082 - Improper input validation
CVE-2012-2250
CWE-20 Low
No
No
- 03.02.2014 SB2014020304
SB2014102219
#VU42144 - Cryptographic Issues
CVE-2013-7295
CWE-310 Low
No
No
- 17.01.2014 SB2014011702
SB2014102219
#VU43220 - Resource Management Errors
CVE-2012-5573
CWE-399 Low
No
No
- 01.01.2013 SB2013010101
#VU43517 - Improper input validation
CVE-2012-4419
CWE-20 Low
No
No
- 14.09.2012 SB2012091405
#VU43518 - Improper input validation
CVE-2012-4922
CWE-20 Low
No
No
- 14.09.2012 SB2012091406
#VU44429 - Memory corruption
CVE-2011-2778
CWE-119 Medium
No
No
- 23.12.2011 SB2011122303
SB2012012301
#VU44430 - Exposure of sensitive information to an unauthorized actor
CVE-2011-4894
CWE-200 Low
No
No
- 23.12.2011 SB2011122304
#VU44431 - Exposure of sensitive information to an unauthorized actor
CVE-2011-4895
CWE-200 Low
No
No
- 23.12.2011 SB2011122304
#VU44434 - Permissions, Privileges, and Access Controls
CVE-2011-2768
CWE-264 Medium
No
No
- 23.12.2011 SB2011122304
SB2012012301
#VU44435 - Exposure of sensitive information to an unauthorized actor
CVE-2011-2769
CWE-200 Low
No
No
- 23.12.2011 SB2011122304
SB2012012301


Showing elements 21 - 40 out of 53