onionshare records
13 published records for vendor onionshare.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation2
- CWE-287 Improper Authentication2
- CWE-284 Improper Access Control1
- CWE-306 Missing Authentication for Critical Function1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
The weakness classes this vendor ships most often: where to look.
CWEAll records
13 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2021-41868No exploit | OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionalitonionshare · onionshare | Critical9.8 | — | 2.4% | Oct 4, 2021 |
30Monitor | CVE-2022-21689No exploit | Denial of Service in Onionshareonionshare · onionshare · CWE-400 | High7.5 | — | 1.3% | Jan 18, 2022 |
28Monitor | CVE-2018-19960No exploit | The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname foronionshare · onionshare · CWE-20 | High7.0 | — | 0.3% | Dec 7, 2018 |
26Monitor | CVE-2022-21693No exploit | Path traversal in Onionshareonionshare · onionshare · CWE-22 | Medium6.5 | — | 1.1% | Jan 18, 2022 |
22Monitor | CVE-2021-41867No exploit | An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of paonionshare · onionshare | Medium5.3 | — | 1.8% | Oct 4, 2021 |
22Monitor | CVE-2022-21688No exploit | Out-of-bounds Read in Onionshareonionshare · onionshare · CWE-125 | Medium5.5 | — | 0.8% | Jan 18, 2022 |
22Monitor | CVE-2016-5026No exploit | hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory.onionshare · onionshare · CWE-284 | Medium5.5 | — | 0.3% | Jan 30, 2017 |
21Monitor | CVE-2022-21694No exploit | OTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the websiteonionshare · onionshare · CWE-732 | Medium5.3 | — | 1.2% | Jan 18, 2022 |
21Monitor | CVE-2022-21695No exploit | Improper Access Control in Onionshareonionshare · onionshare · CWE-287 | Medium5.3 | — | 0.8% | Jan 18, 2022 |
21Monitor | CVE-2022-21690No exploit | Cross-Site Scripting in Onionshareonionshare · onionshare · CWE-79 | Medium5.4 | — | 0.7% | Jan 18, 2022 |
17Monitor | CVE-2022-21692No exploit | Improper Access Control in Onionshareonionshare · onionshare · CWE-287 | Medium4.3 | — | 0.7% | Jan 18, 2022 |
17Monitor | CVE-2022-21696No exploit | Username spoofing in OnionShareonionshare · onionshare · CWE-20 | Medium4.3 | — | 0.7% | Jan 18, 2022 |
17Monitor | CVE-2022-21691No exploit | Improper Access Control in Onionshareonionshare · onionshare · CWE-306 | Medium4.3 | — | 0.6% | Jan 18, 2022 |
- CVE-2021-4186840Plan
OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionalit
CriticalCVSS 9.8No exploitEPSS 2%onionshare · onionshareOct 4, 2021
- CVE-2022-2168930Monitor
Denial of Service in Onionshare
HighCVSS 7.5No exploitEPSS 1%onionshare · onionshareJan 18, 2022
- CVE-2018-1996028Monitor
The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for
HighCVSS 7.0No exploitEPSS 0%onionshare · onionshareDec 7, 2018
- CVE-2022-2169326Monitor
Path traversal in Onionshare
MediumCVSS 6.5No exploitEPSS 1%onionshare · onionshareJan 18, 2022
- CVE-2021-4186722Monitor
An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of pa
MediumCVSS 5.3No exploitEPSS 1%onionshare · onionshareOct 4, 2021
- CVE-2022-2168822Monitor
Out-of-bounds Read in Onionshare
MediumCVSS 5.5No exploitEPSS 0%onionshare · onionshareJan 18, 2022
- CVE-2016-502622Monitor
hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory.
MediumCVSS 5.5No exploitEPSS 0%onionshare · onionshareJan 30, 2017
- CVE-2022-2169421Monitor
OTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the website
MediumCVSS 5.3No exploitEPSS 1%onionshare · onionshareJan 18, 2022
- CVE-2022-2169521Monitor
Improper Access Control in Onionshare
MediumCVSS 5.3No exploitEPSS 0%onionshare · onionshareJan 18, 2022
- CVE-2022-2169021Monitor
Cross-Site Scripting in Onionshare
MediumCVSS 5.4No exploitEPSS 0%onionshare · onionshareJan 18, 2022
- CVE-2022-2169217Monitor
Improper Access Control in Onionshare
MediumCVSS 4.3No exploitEPSS 0%onionshare · onionshareJan 18, 2022
- CVE-2022-2169617Monitor
Username spoofing in OnionShare
MediumCVSS 4.3No exploitEPSS 0%onionshare · onionshareJan 18, 2022
- CVE-2022-2169117Monitor
Improper Access Control in Onionshare
MediumCVSS 4.3No exploitEPSS 0%onionshare · onionshareJan 18, 2022