Lucene search
+L

1734 matches found

CNNVD
CNNVD
•added 2022/04/20 12:00 a.m.•19 views

Wire 跨站脚本漏洞

Wire is a chat program from the German company Wire. The program supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, allows voice calls, sends photos, and its original way of saying hello, PING. A cross-site scripting vulnerability exists in the Wire webapp, which stems fr...

9.6CVSS5.6AI score0.00996EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/04/20 12:00 a.m.•7 views

PT-2022-16887

Name of the Vulnerable Software and Affected Versions wire-webapp versions prior to 2022-03-30-production.0 Description The issue is related to insufficient escaping in markdown "code highlighting" in the wire-webapp, which allows the possibility of injecting and executing arbitrary HTML code and...

9.6CVSS0.00996EPSS
SaveExploits0References7
CNVD
CNVD
•added 2022/04/15 12:00 a.m.•33 views

Wire server denial of service vulnerability

Wire is a chat software from the German company Wire. The software supports Web, WindowsiOS, Android, OS X platforms, has a group function, can voice calls, send photos and its original way of greeting PING. wire server has a denial of service vulnerability, the vulnerability stems from the syste...

5CVSS2.2AI score0.01361EPSS
SaveExploits1
osv-cve
osv-cve
•added 2022/04/13 7:15 p.m.•26 views

CVE-2021-41119

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

7.5CVSS6.5AI score
SaveExploits0References2
NVD
NVD
•added 2022/04/13 7:15 p.m.•21 views

CVE-2021-41119

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

7.5CVSS0.01361EPSS
SaveExploits1References2
Prion
Prion
•added 2022/04/13 7:15 p.m.•30 views

Design/Logic Flaw

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

5CVSS7.3AI score0.01361EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2022/04/13 7:15 p.m.•44 views

CVE-2021-41119

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

7.5CVSS6.9AI score0.01361EPSS
SaveExploits1References6
osv-ubuntu
osv-ubuntu
•added 2022/04/13 7:15 p.m.•26 views

UBUNTU-CVE-2021-41119

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

7.5CVSS5.7AI score0.01361EPSS
SaveExploits1References7
CVE
CVE
•added 2022/04/13 6:25 p.m.•95 views

CVE-2021-41119

CVE-2021-41119 affects Wire-server (back-end service). A denial-of-service vulnerability exists in pre-2022-03-01 releases where a crafted JSON object can trigger a hash collision, causing the parser to run in at least quadratic time and potentially exhaust server resources on heavily loaded inst...

7.5CVSS6AI score0.01361EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/04/13 6:25 p.m.•11 views

CVE-2021-41119 DoS vulnerabiliity in wire-server json parser

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

5.3CVSS7.3AI score0.01361EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/04/13 6:25 p.m.•39 views

CVE-2021-41119 DoS vulnerabiliity in wire-server json parser

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

5.3CVSS7.6AI score0.01361EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2022/04/13 6:25 p.m.•58 views

CVE-2021-41119

Removed by vendor...

7.5CVSS7.5AI score0.01361EPSS
SaveExploits1
CNNVD
CNNVD
•added 2022/04/13 12:00 a.m.•18 views

Wire 资源管理错误漏洞

Wire is a chat software from the German company Wire. The software supports Web, WindowsiOS, Android, OS X platforms, has a group function, can voice calls, send photos and its original way of greeting PING. wire server has a denial of service vulnerability, the vulnerability stems from the syste...

7.5CVSS7.2AI score0.01361EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/04/13 12:00 a.m.•6 views

PT-2022-11366

Name of the Vulnerable Software and Affected Versions wire-server versions prior to 2022-03-01 Description The issue is a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it, which can lead to a denia...

7.5CVSS5.6AI score0.01361EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/13 12:00 a.m.•8 views

CVE-2021-41119: Uncontrolled Resource Consumption

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

7.5CVSS6.9AI score0.01361EPSS
SaveExploits1References3
CNVD
CNVD
•added 2022/04/11 12:00 a.m.•36 views

Mitsubishi MELSEC Q03UDECPU PLC has a Logic Defect Vulnerability

Mitsubishi Electric Automation China Co., Ltd. is a wholly-owned enterprise in China invested by Mitsubishi Electric Corporation. It mainly produces mechanical appliances for power distribution including low-voltage circuit breakers, electromagnetic openers and closers, electrical processing...

8.1CVSS6.6AI score0.01258EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2022/04/08 9:49 a.m.•59 views

Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States

A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual's criminal work as a "high-level hacker" in the financially motivated group FIN7. Denys Iarmak, who worked as a penetration tester for the cartel from November 2016 through November 2018, ha...

1.8AI score
SaveExploits0
Krebs on Security
Krebs on Security
•added 2022/03/25 5:10 p.m.•43 views

Estonian Tied to 13 Ransomware Attacks Gets 66 Months in Prison

An Estonian man was sentenced today to more than five years in a U.S. prison for his role in at least 13 ransomware attacks that caused losses of approximately $53 million. Prosecutors say the accused also enjoyed a lengthy career of "cashing out" access to hacked bank accounts worldwide. Maksim...

SaveExploits0
The Hacker News
The Hacker News
•added 2022/03/24 1:27 p.m.•34 views

23-Year-Old Russian Hacker Wanted by FBI for Running Marketplace of Stolen Logins

A 23-year-old Russian national has been indicted in the U.S. and added to the Federal Bureau of Investigation's FBI Cyber Most Wanted List for his alleged role as the administrator of Marketplace A, a cyber crime forum that sold stolen login credentials, personal information, and credit card data...

0.6AI score
SaveExploits0
Malwarebytes
Malwarebytes
•added 2022/03/17 12:44 p.m.•29 views

FBI catches up with one of its Most Wanted, arrests head of advance-fee crime network

Some dont mind putting extra effort into making their crime appear as legitimate as possible by perpetuating more lies as long as they are guaranteed money in the end. Osondu Victor Igwilo is one such Nigerian scammer. The "catchers" 52-year-old Igwilo has been on the Federal Bureau of...

0.5AI score
SaveExploits0
Rows per page
Query Builder