Lucene search
+L

1716 matches found

OSV
OSV
•added 2023/01/27 8:43 p.m.•44 views

CVE-2022-39380 wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering

Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HTML representation. The error makes it...

5.3CVSS5.2AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/27 12:00 a.m.•8 views

CVE-2022-39380: Improper Handling of Exceptional Conditions

Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HTML representation. The error makes it...

5.3CVSS5.8AI score0.00623EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/01/27 12:00 a.m.•21 views

PT-2023-13724 · Wire · Wire

Name of the Vulnerable Software and Affected Versions: Wire web-app versions prior to 2022-11-02 Description: The issue is related to Improper Handling of Exceptional Conditions in the Wire web-app. Certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HT...

5.3CVSS4.9AI score0.00623EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/01/27 12:00 a.m.•20 views

Wire 安全漏洞

Wire is a chat program from the German company Wire. The software supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, allows voice calls, sends photos as well as its original greeting method PING. A security vulnerability exists in versions of the Wire web-app prior to...

5.3CVSS5.7AI score0.00623EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/27 12:00 a.m.•13 views

CVE-2023-22737: Missing Authorization

wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-12-09, every member of a Conversation can remove a Bot from a Conversation due to a missing permissions check. Only Conversation admins should be able to remove Bots. Regular...

6.5CVSS5.8AI score0.0073EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/01/27 12:00 a.m.•20 views

PT-2023-18678 · Wire · Wire-Server

Name of the Vulnerable Software and Affected Versions: wire-server versions prior to 2022-12-09 Description: The issue is related to a missing permissions check in wire-server, which provides back end services for Wire, a team communication and collaboration platform. Due to this, every member of...

6.5CVSS6.2AI score0.0073EPSS
SaveExploits0References7
OSV
OSV
•added 2022/12/26 6:15 a.m.•14 views

CVE-2021-35954

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...

8.1CVSS5.8AI score0.00334EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/26 6:15 a.m.•26 views

CVE-2021-35954

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...

8.1CVSS0.00334EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/26 12:00 a.m.•7 views

CVE-2021-35954: Undefined Security Weakness

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...

8.1CVSS5.8AI score0.00334EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/12/26 12:00 a.m.•12 views

CVE-2021-35954

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...

6.9AI score0.00334EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/26 12:00 a.m.•16 views

PT-2022-10481 · Unknown · Fastrack Reflex 2.0

Name of the Vulnerable Software and Affected Versions: fastrack Reflex 2.0 W307S REFLEX v90.89 Activity Tracker version 90.89 Description: The issue allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD...

8.1CVSS8AI score0.00334EPSS
SaveExploits0References4
The Hacker News
The Hacker News
•added 2022/11/28 5:25 a.m.•40 views

Elon Musk Confirms Twitter 2.0 will Bring End-to-End Encryption to Direct Messages

Twitter chief executive Elon Musk confirmed plans for end-to-end encryption E2EE for direct messages on the platform. The feature is part of Musk's vision for Twitter 2.0, which is expected to be what's called an "everything app." Other functionalities include longform tweets and payments,...

7.2AI score
SaveExploits0
CNVD
CNVD
•added 2022/11/23 12:00 a.m.•53 views

Wire Information Disclosure Vulnerability (CNVD-2022-80682)

Wire is a chat software from the German company Wire. The software supports Web, WindowsiOS, Android, and OS X platforms, has group functionality, can make voice calls, send photos, and its original greeting method, PING. Wire 3.22.3993 and earlier versions contain an information disclosure...

4.7CVSS0.4AI score0.00283EPSS
SaveExploits1References1
NVD
NVD
•added 2022/11/18 8:15 p.m.•34 views

CVE-2022-43673

Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved for a limited period of time from the AppData\Roaming\Wire\IndexedDB\httpsapp.wire.com0.indexeddb.leveldb database...

4.7CVSS0.00283EPSS
SaveExploits1References2
Prion
Prion
•added 2022/11/18 8:15 p.m.•34 views

Design/Logic Flaw

Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved for a limited period of time from the AppData\Roaming\Wire\IndexedDB\httpsapp.wire.com0.indexeddb.leveldb database...

1CVSS4.9AI score0.00283EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/18 12:00 a.m.•15 views

CVE-2022-43673

Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved for a limited period of time from the AppData\Roaming\Wire\IndexedDB\httpsapp.wire.com0.indexeddb.leveldb database...

6.8AI score0.00283EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/11/18 12:00 a.m.•43 views

CVE-2022-43673

Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved for a limited period of time from the AppData\Roaming\Wire\IndexedDB\httpsapp.wire.com0.indexeddb.leveldb database...

5.1AI score0.00283EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/11/18 12:00 a.m.•9 views

PT-2022-27000

Name of the Vulnerable Software and Affected Versions Wire versions through 3.22.3993 Description The issue concerns the advertisement of deletion of sent messages in Wire, but the messages can still be retrieved for a limited period from the AppDataRoamingWireIndexedDBhttps app.wire.com...

4.7CVSS0.00283EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/18 12:00 a.m.•6 views

CVE-2022-43673: Insertion of Sensitive Information into Log File

Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved for a limited period of time from the AppData\Roaming\Wire\IndexedDB\httpsapp.wire.com0.indexeddb.leveldb database...

4.7CVSS5.8AI score0.00283EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/11/18 12:00 a.m.•19 views

Wire 日志信息泄露漏洞

Wire is a chat software from the German company Wire. The software supports Web, WindowsiOS, Android, and OS X platforms, has group functionality, can make voice calls, send photos, and its original greeting method, PING. Wire 3.22.3993 and earlier versions contain an information disclosure...

4.7CVSS5.9AI score0.00283EPSS
SaveExploits1References3
Rows per page
Query Builder