Buttercup

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-20199 Aug 16, 00:15 LOW PATCH Monitor

A vulnerability was found in Buttercup buttercup-browser-extension up to 0.14.2. Rated low severity (CVSS 1.3), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Hashicorp Buttercup

NVD GitHub VulDB

CVSS 4.0

1.3

EPSS

0.0%

CVE-2023-41646 Sep 07, 22:15 npm MEDIUM POC PATCH This Month

Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Buttercup

NVD GitHub

CVSS 3.1

5.3

EPSS

0.4%

CVE-2017-20199

EPSS 0% CVSS 1.3

LOW PATCH Monitor

A vulnerability was found in Buttercup buttercup-browser-extension up to 0.14.2. Rated low severity (CVSS 1.3), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Hashicorp Buttercup

NVD GitHub VulDB

CVE-2023-41646 npm

EPSS 0% CVSS 5.3

MEDIUM POC PATCH This Month

Information Disclosure Buttercup

NVD GitHub