Known vulnerabilities in Tor - page 2

Software: Tor
Software CPE: cpe:2.3:a:tor_eff_org:tor:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 53
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Tor Tor is affected by 53 known vulnerabilities: 1 high, 29 medium, 23 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU31386 - NULL Pointer Dereference
CVE-2017-8820
CWE-476 Medium
No
No
0.3.1.9 03.12.2017 SB2017120303
SB2017121607
SB2017120305
and 3 more
#VU31387 - Memory corruption
CVE-2017-8821
CWE-119 Medium
No
No
0.3.1.9 03.12.2017 SB2017120303
SB2017120305
SB2017120306
and 2 more
#VU31388 - Use After Free
CVE-2017-8823
CWE-416 High
No
No
0.3.1.9 03.12.2017 SB2017120303
SB2017121607
SB2017120305
and 3 more
#VU37868 - Improper input validation
CVE-2017-8819
CWE-20 Medium
No
No
0.3.1.9 03.12.2017 SB2017120304
SB2017121607
SB2017120305
and 3 more
#VU37869 - Improper input validation
CVE-2017-8822
CWE-20 Low
No
No
0.3.1.9 03.12.2017 SB2017120304
SB2017121607
SB2017120305
and 3 more
#VU8851 - Exposure of sensitive information to an unauthorized actor
CVE-2017-0380
CWE-200 Low
No
No
- 09.10.2017 SB2017101708
SB2017100703
SB2017101068
and 7 more
#VU38653 - Improper input validation
CVE-2017-11565
CWE-20 Medium
No
No
- 23.07.2017 SB2017072303
#VU7479 - Session Fixation
CVE-2017-0377
CWE-384 Low
No
No
- 12.07.2017 SB2017062922
#VU31417 - Reachable Assertion
CVE-2017-0375
CWE-617 Medium
No
No
0.3.0.8 09.06.2017 SB2017060910
SB20170613104
SB2017092916
and 2 more
#VU31418 - Reachable Assertion
CVE-2017-0376
CWE-617 Medium
No
No
0.3.0.8 09.06.2017 SB2017060910
SB2017061218
SB20170613104
and 3 more
#VU39954 - Memory corruption
CVE-2016-8860
CWE-119 Medium
No
No
- 04.01.2017 SB2017010406
SB2016122405
SB2016102117
and 4 more
#VU41438 - Improper input validation
CVE-2014-5117
CWE-20 Medium
No
No
- 30.07.2014 SB2014073002
SB2014073106
#VU42081 - Improper input validation
CVE-2012-2249
CWE-20 Low
No
No
- 03.02.2014 SB2014020303
SB2014102219
#VU42082 - Improper input validation
CVE-2012-2250
CWE-20 Low
No
No
- 03.02.2014 SB2014020304
SB2014102219
#VU42144 - Cryptographic Issues
CVE-2013-7295
CWE-310 Low
No
No
- 17.01.2014 SB2014011702
SB2014102219
#VU43220 - Resource Management Errors
CVE-2012-5573
CWE-399 Low
No
No
- 01.01.2013 SB2013010101
#VU43517 - Improper input validation
CVE-2012-4419
CWE-20 Low
No
No
- 14.09.2012 SB2012091405
#VU43518 - Improper input validation
CVE-2012-4922
CWE-20 Low
No
No
- 14.09.2012 SB2012091406
#VU44429 - Memory corruption
CVE-2011-2778
CWE-119 Medium
No
No
- 23.12.2011 SB2011122303
SB2012012301
#VU44433 - Exposure of sensitive information to an unauthorized actor
CVE-2011-4897
CWE-200 Low
No
No
- 23.12.2011 SB2011122305


Showing elements 21 - 40 out of 53