Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
wire wire vulnerabilities and exploits
(subscribe to this query)
8
CVSSv3
CVE-2020-15258
In Wire prior to 3.20.x, `shell.openExternal` was used without checking the URL. This vulnerability allows an malicious user to execute code on the victims machine by sending messages containing links with arbitrary protocols. The victim has to interact with the link and sees the...
Wire Wire
4.6
CVSSv3
CVE-2021-41094
Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating encryption keys via the Secure Enclave, ho...
Wire Wire
4.3
CVSSv3
CVE-2021-32755
Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher...
Wire Wire
6.5
CVSSv3
CVE-2021-32666
wire-ios is the iOS version of Wire, an open-source secure messaging app. In wire-ios versions 3.8.0 and prior, a vulnerability exists that can cause a denial of service between users. If a user has an invalid assetID for their profile picture and it contains the " character...
Wire Wire
7.5
CVSSv3
CVE-2018-8909
The Wire application prior to 2018-03-07 for Android allows malicious users to write to pathnames outside of the downloads directory via a ../ in a filename of a received file, related to AssetService.scala.
Wire Wire
9.8
CVSSv3
CVE-2021-41093
Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they can take over an account by changing the email. This issue has been resolved in version 3.86 which uses a new endpoint which additionally requires an authentic...
Wire Wire
NA
CVE-2004-1704
WpQuiz 2.60b1 up to and including 2.60b8 allows remote malicious users to gain privileges via a direct request to adminrestore.php in the extras directory.
Wire Plastic Design Wpquiz 2.60b5
Wire Plastic Design Wpquiz 2.60b6
Wire Plastic Design Wpquiz 2.60b1
Wire Plastic Design Wpquiz 2.60b2
Wire Plastic Design Wpquiz 2.60b3
Wire Plastic Design Wpquiz 2.60b4
Wire Plastic Design Wpquiz 2.60b7
Wire Plastic Design Wpquiz 2.60b8
5.3
CVSSv3
CVE-2022-39380
Wire web-app is part of Wire communications. Versions before 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to HTML representation. The error m...
Wire Wire-webapp
8.1
CVSSv3
CVE-2022-31122
Wire is an encrypted communication and collaboration platform. Versions before 2022-07-12/Chart 4.19.0 are subject to Token Recipient Confusion. If an attacker has certain details of SAML IdP metadata, and configures their own SAML on the same backend, the attacker can delete all...
Wire Wire Server
6.5
CVSSv3
CVE-2021-21396
wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16 and before version 2021-03-02, the client metadata of all users was exposed in the `GET /users/list-clients` endpoint. The endpoint could be used by any logged...
Wire Wire Server
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5324
path traversal
CVE-2024-4743
CVE-2024-5184
TCP
CVE-2024-27822
code injection
CVE-2024-28995
CVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »