Approved changes feed: RSS · Atom
cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Torproject (afa7dfd2-d927-5903-8be5-17975f0a6575) |
|---|---|
| Product | Tor (7218de4e-744e-5b99-80a0-16fcf16b33ad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/torproject/tor |
purl2cpe | 2026-06-01 10:12:23.352078 |
pkg:torproject/tor |
purl2cpe | 2026-06-01 10:12:23.352079 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44603 |
vulnerable | 2026-06-08 08:05:11.215910 |
Details available
LOW (3.7)
Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.
Published: 2026-05-07T03:21:24.822Z
Updated: 2026-05-07T14:58:13.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44602 |
vulnerable | 2026-06-08 08:05:11.215543 |
Details available
LOW (3.7)
Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.
Published: 2026-05-07T03:17:32.456Z
Updated: 2026-05-07T14:58:19.602Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44601 |
vulnerable | 2026-06-08 08:05:11.215170 |
Details available
LOW (3.7)
Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.
Published: 2026-05-07T03:09:51.106Z
Updated: 2026-05-07T14:58:24.830Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44600 |
vulnerable | 2026-06-08 08:05:11.214768 |
Details available
LOW (3.7)
Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010.
Published: 2026-05-07T02:20:51.250Z
Updated: 2026-05-07T12:46:59.949Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44599 |
vulnerable | 2026-06-08 08:05:11.214487 |
Details available
LOW (3.7)
Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.
Published: 2026-05-07T02:11:56.238Z
Updated: 2026-05-07T12:48:40.800Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44597 |
vulnerable | 2026-06-08 08:05:11.213204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23589 |
vulnerable | 2026-06-08 05:56:03.735460 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33903 |
vulnerable | 2026-06-08 05:44:51.685743 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38385 |
vulnerable | 2026-06-08 05:32:55.995790 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34550 |
vulnerable | 2026-06-08 05:32:13.769521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34549 |
vulnerable | 2026-06-08 05:32:13.769031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34548 |
vulnerable | 2026-06-08 05:32:13.768594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28090 |
vulnerable | 2026-06-08 05:31:22.915226 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28089 |
vulnerable | 2026-06-08 05:31:22.911208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8516 |
vulnerable | 2026-06-08 05:27:16.679391 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15572 |
vulnerable | 2026-06-08 05:19:26.121986 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10593 |
vulnerable | 2026-06-08 05:16:35.332319 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10592 |
vulnerable | 2026-06-08 05:16:35.331791 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8955 |
vulnerable | 2026-06-08 05:14:24.755569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0491 |
vulnerable | 2026-06-08 05:10:23.950530 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0490 |
vulnerable | 2026-06-08 05:10:23.941053 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16541 |
vulnerable | 2026-06-08 05:09:00.476439 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-0380 |
vulnerable | 2026-06-08 05:08:26.062750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-0376 |
vulnerable | 2026-06-08 05:08:26.048123 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-0375 |
vulnerable | 2026-06-08 05:08:26.047677 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8860 |
vulnerable | 2026-06-08 05:08:21.940620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1254 |
vulnerable | 2026-06-08 05:07:27.053369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2929 |
vulnerable | 2026-06-08 05:06:36.204174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2928 |
vulnerable | 2026-06-08 05:06:36.203838 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2689 |
vulnerable | 2026-06-08 05:06:35.569498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2688 |
vulnerable | 2026-06-08 05:06:35.569081 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7295 |
vulnerable | 2026-06-08 05:05:09.466553 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4922 |
vulnerable | 2026-06-08 05:02:53.213218 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4419 |
vulnerable | 2026-06-08 05:02:17.386169 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.