Known vulnerabilities in Tor - page 3

Software: Tor
Software CPE: cpe:2.3:a:tor_eff_org:tor:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 53
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Tor Tor is affected by 53 known vulnerabilities: 1 high, 29 medium, 23 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26506 - Missing release of memory after effective lifetime
CVE-2020-10593
CWE-401 Medium
No
No
0.3.5.10, 0.4.1.9, 0.4.2.7 01.04.2020 SB2020040131
SB2020040132
SB2020040133
and 3 more
#VU26505 - Resource exhaustion
CVE-2020-10592
CWE-400 Medium
No
No
0.3.5.10, 0.4.1.9, 0.4.2.7 01.04.2020 SB2020040131
SB2020040132
SB2020040133
and 4 more
#VU30428 -
CVE-2015-2688
Medium
No
No
0.2.5.11 24.01.2020 SB2020012425
SB2015032311
SB2015032312
and 6 more
#VU30429 - Improper input validation
CVE-2015-2689
CWE-20 Medium
No
No
0.2.5.11 24.01.2020 SB2020012425
SB2015032311
SB2015032312
and 6 more
#VU31154 - Out-of-bounds read
CVE-2019-8955
CWE-125 Medium
No
No
0.3.4.11 22.02.2019 SB2019022217
SB2019040231
SB2019040232
and 6 more
#VU31346 - Use After Free
CVE-2018-0491
CWE-416 Medium
Available
No
0.3.2.10 05.03.2018 SB2018030514
SB2018030403
SB2018030818
#VU31385 - Memory corruption
CVE-2016-1254
CWE-119 Medium
No
No
0.2.8.12 05.12.2017 SB2017120513
SB2016122022
SB2016122023
and 2 more
#VU31386 - NULL Pointer Dereference
CVE-2017-8820
CWE-476 Medium
No
No
0.3.1.9 03.12.2017 SB2017120303
SB2017121607
SB2017120305
and 3 more
#VU31387 - Memory corruption
CVE-2017-8821
CWE-119 Medium
No
No
0.3.1.9 03.12.2017 SB2017120303
SB2017120305
SB2017120306
and 2 more
#VU31388 - Use After Free
CVE-2017-8823
CWE-416 High
No
No
0.3.1.9 03.12.2017 SB2017120303
SB2017121607
SB2017120305
and 3 more
#VU8851 - Exposure of sensitive information to an unauthorized actor
CVE-2017-0380
CWE-200 Low
No
No
- 09.10.2017 SB2017101708
SB2017100703
SB2017101068
and 7 more
#VU7479 - Session Fixation
CVE-2017-0377
CWE-384 Low
No
No
- 12.07.2017 SB2017062922
#VU31418 - Reachable Assertion
CVE-2017-0376
CWE-617 Medium
No
No
0.3.0.8 09.06.2017 SB2017060910
SB2017061218
SB20170613104
and 3 more


Showing elements 41 - 60 out of 53