Lucene search
+L

1808 matches found

Cvelist
Cvelist
•added 2022/03/01 6:25 p.m.•48 views

CVE-2021-41193 Use of Externally-Controlled Format String in wire-avs

wire-avs is the audio visual signaling AVS component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are...

9.8CVSS10AI score0.02466EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/01 6:25 p.m.•122 views

CVE-2021-41193

Wire-AVS (the AVS component of Wire) is affected by a remote format string vulnerability in versions before 7.1.12. The issue can lead to denial of service or potentially arbitrary code execution. A fix is available in wire-avs 7.1.12 and has been integrated into Wire products. Connected sources ...

9.8CVSS9.9AI score0.02466EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/01 12:00 a.m.•9 views

CVE-2021-41193: Use of Externally-Controlled Format String

wire-avs is the audio visual signaling AVS component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are...

9.8CVSS8.3AI score0.02466EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/01 12:00 a.m.•22 views

Wire-AVS 格式化字符串错误漏洞

Wire-AVS is the repository is part of the Wire source code. A formatting string error vulnerability exists in Wire-AVS that could be exploited by an attacker to cause a denial of service or possibly execute arbitrary code...

9.8CVSS8.7AI score0.02466EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/03/01 12:00 a.m.•6 views

PT-2022-11373

Name of the Vulnerable Software and Affected Versions wire-avs versions prior to 7.1.12 Description A remote format string vulnerability allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are currently no known...

9.8CVSS0.02466EPSS
SaveExploits0References7
osv_alpine
osv_alpine
•added 2022/02/18 6:15 p.m.•11 views

ALPINE-CVE-2016-2124

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required...

5.9CVSS7AI score0.01766EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/09 12:00 a.m.•81 views

Wire webapp has an unspecified vulnerability

Wire is a chat software from a personal developer. The software supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, can make voice calls, send photos, and its original way of saying hello, PING. wire webapp has a security vulnerability, and no details of the vulnerability...

4.4CVSS2.1AI score0.00307EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/04 11:15 p.m.•46 views

CVE-2022-23605

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

4.4CVSS0.00307EPSS
SaveExploits0References2
Prion
Prion
•added 2022/02/04 11:15 p.m.•31 views

Design/Logic Flaw

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

2.1CVSS3.8AI score0.00307EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2022/02/04 10:32 p.m.•36 views

CVE-2022-23605 Expired Ephemeral Messages not reliably removed in wire-webapp

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

4.4CVSS4.3AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2022/02/04 10:32 p.m.•54 views

CVE-2022-23605 Expired Ephemeral Messages not reliably removed in wire-webapp

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

4.4CVSS4.9AI score0.00307EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/02/04 10:32 p.m.•13 views

CVE-2022-23605 Expired Ephemeral Messages not reliably removed in wire-webapp

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

4.4CVSS4.6AI score0.00307EPSS
SaveExploits0References2
Mend
Mend
•added 2022/02/04 10:32 p.m.•8 views

CVE-2022-23605

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

6.7CVSS0.00307EPSS
SaveExploits0References4
CVE
CVE
•added 2022/02/04 10:32 p.m.•85 views

CVE-2022-23605

CVE-2022-23605 affects Wire Webapp: expired ephemeral messages were not reliably removed from local chat history and, in affected versions prior to 2022-01-27-production.0, ephemeral messages/assets could be accessible via the local search function. Viewing a message in chat view triggers deletio...

4.4CVSS3.7AI score0.00307EPSS
SaveExploits0References2Affected Software1
Malwarebytes
Malwarebytes
•added 2022/02/04 1:09 p.m.•44 views

FBI warns of bogus job postings on recruitment sites

Before Christmas was a busy time down at the fake job factory, with all manner of dubious antics out to ruin someone’s day. We’re now info February and the bogus job offers show no sign of abating. In fact, the FBI considers it to be such a problem that its issued an alert. This isn’t your typica...

6.9AI score
SaveExploits0
CNNVD
CNNVD
•added 2022/02/04 12:00 a.m.•27 views

Wire 安全漏洞

Wire is a chat software from a personal developer. The software supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, can make voice calls, send photos, and its original way of saying hello, PING. wire webapp has a security vulnerability, and no details of the vulnerability...

4.4CVSS5.5AI score0.00307EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/04 12:00 a.m.•13 views

CVE-2022-23605: Improper Removal of Sensitive Information Before Storage or Transfer

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

4.4CVSS5.4AI score0.00307EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/02/04 12:00 a.m.•6 views

PT-2022-16120

Name of the Vulnerable Software and Affected Versions Wire Webapp versions prior to 2022-01-27-production.0 Description The issue concerns the unreliable removal of expired ephemeral messages from the local chat history in the Wire Webapp. These messages and associated assets could still be...

4.4CVSS0.00307EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•39 views

Mageia: Security Advisory (MGASA-2018-0355)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.02665EPSS
SaveExploits0References5
The Hacker News
The Hacker News
•added 2022/01/25 7:22 a.m.•36 views

Mobile Banking Trojan BRATA Gains New, Dangerous Capabilities

The Android malware tracked as BRATA has been updated with new features that grants it the ability to record keystrokes, track device locations, and even perform a factory reset in an apparent bid to cover up fraudulent wire transfers. The latest variants, detected late last year, are said to be...

2.7AI score
SaveExploits0
Rows per page
Query Builder