webtorrent records
2 published records for vendor webtorrent.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-201 Insertion of Sensitive Information Into Sent Data1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2016-10519No exploit | A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and webtorrent · bittorrent-dht · CWE-201 | High7.5 | — | 1.6% | May 31, 2018 |
24Monitor | CVE-2019-15782No exploit | WebTorrent before 0.107.6 allows XSS in the HTTP server via a title or file name.webtorrent · webtorrent · CWE-79 | Medium6.1 | — | 1.4% | Aug 29, 2019 |
- CVE-2016-1051930Monitor
A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and
HighCVSS 7.5No exploitEPSS 1%webtorrent · bittorrent-dhtMay 31, 2018
- CVE-2019-1578224Monitor
WebTorrent before 0.107.6 allows XSS in the HTTP server via a title or file name.
MediumCVSS 6.1No exploitEPSS 1%webtorrent · webtorrentAug 29, 2019