TorProject Tor Browser 7.0.4

CPE Details

TorProject Tor Browser 7.0.4
torproject
tor_browser
7.0.4
2019-09-23
14h54 +00:00
2019-09-23
14h54 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:torproject:tor_browser:7.0.4:*:*:*:*:*:*:*

Informations

Vendor

torproject

Product

tor_browser

Version

7.0.4

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-39246 2021-09-24 16h08 +00:00 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits to v2 onion addresses. Exact timestamps of these onion-service visits are logged locally, and an attacker might be able to compare them to timestamp data collected by the destination server (or collected by a rogue site within the Tor network).
6.1
Moyen
CVE-2019-13075 2019-06-30 11h47 +00:00 Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a behavior of Firefox before 68.
5.3
Moyen
CVE-2019-12383 2019-05-28 00h21 +00:00 Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting.
4.3
Moyen
CVE-2017-16639 2018-09-14 19h00 +00:00 Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541. User interaction is required to trigger this vulnerability.
4.3
Moyen
CVE-2018-16983 2018-09-13 02h00 +00:00 NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value.
9.8
Critique