Vendors / torproject Records 53 All Threatist records
Exploited (KEV) 1
CVSS critical 5
CVSS high 27
Exploited now torproject records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0312 · Published 2018-09-13 · No fix listed
Priority LOW 28
Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits to v2 onion addresses.
CVSS 3.1 MEDIUM 6.1· Physical · No auth · No interaction · EPSS 0.00475 · Published 2021-09-24 · No fix listed CWE-532
Priority LOW 28
Tor Browser through 8.5.3 has an information exposure vulnerability.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01856 · Published 2019-06-30 · No fix listed CWE-200
Priority LOW 25
Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541.
CVSS 3.0 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.02355 · Published 2018-09-14 · No fix listed CWE-200
Priority LOW 24
Tor Browser before 8.0.1 has an information exposure vulnerability.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.02164 · Published 2019-05-28 · No fix listed CWE-203
Open these records in search → All records by CVSS severity
5 27 21 0 0
THREATIST.IORead the docs