wire vulnerabilities and exploits

(subscribe to this query)

wire-webapp is an open-source front end for Wire, a secure collaboration platform. In wire-webapp before version 2021-03-15-production.0, when being prompted to enter the app-lock passphrase, the typed passphrase will be sent into the most recently used chat when the user does no...

Wire Wire-webapp Wire Wire-webapp 2019-02-11 Wire Wire-webapp 2019-02-13 Wire Wire-webapp 2019-02-18 Wire Wire-webapp 2019-02-27 Wire Wire-webapp 2019-02-28 Wire Wire-webapp 2019-03-05 Wire Wire-webapp 2019-03-07 Wire Wire-webapp 2019-03-11 Wire Wire-webapp 2019-03-13 Wire Wire-webapp 2019-03-20 Wire Wire-webapp 2019-03-25

Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering `@mentions` in the wire-webapp. If a user receives and views a malicious message, arbitrary code is injected and executed in the context ...

Wire Wire-webapp 2016-07-29-17-00 Wire Wire-webapp 2016-08-04-15-44 Wire Wire-webapp 2016-08-23-09-31 Wire Wire-webapp 2016-08-24-10-10 Wire Wire-webapp 2016-08-29-14-54 Wire Wire-webapp 2016-09-08-15-38 Wire Wire-webapp 2016-09-19-14-01 Wire Wire-webapp 2016-09-28-14-58 Wire Wire-webapp 2016-10-11-15-34 Wire Wire-webapp 2016-10-18-08-10 Wire Wire-webapp 2016-10-25-08-17 Wire Wire-webapp 2016-10-26-18-58

wire-webapp is the web application interface for the wire messaging service. Insufficient escaping in markdown “code highlighting” in the wire-webapp resulted in the possibility of injecting and executing arbitrary HTML code and thus also JavaScript. If a user receive...

Wire Wire-webapp 2016-07-29-17-00 Wire Wire-webapp 2016-08-04-15-44 Wire Wire-webapp 2016-08-23-09-31 Wire Wire-webapp 2016-08-24-10-10 Wire Wire-webapp 2016-08-29-14-54 Wire Wire-webapp 2016-09-08-15-38 Wire Wire-webapp 2016-09-19-14-01 Wire Wire-webapp 2016-09-28-14-58 Wire Wire-webapp 2016-10-11-15-34 Wire Wire-webapp 2016-10-18-08-10 Wire Wire-webapp 2016-10-25-08-17 Wire Wire-webapp 2016-10-26-18-58

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions prior to 2022-01-27-production.0 ephemeral messages and assets might ...

Wire Wire-webapp 2016-07-29-17-00 Wire Wire-webapp 2016-08-04-15-44 Wire Wire-webapp 2016-08-23-09-31 Wire Wire-webapp 2016-08-24-10-10 Wire Wire-webapp 2016-08-29-14-54 Wire Wire-webapp 2016-09-08-15-38 Wire Wire-webapp 2016-09-19-14-01 Wire Wire-webapp 2016-09-28-14-58 Wire Wire-webapp 2016-10-11-15-34 Wire Wire-webapp 2016-10-18-08-10 Wire Wire-webapp 2016-10-25-08-17 Wire Wire-webapp 2016-10-26-18-58

Wire prior to 2020-10-16 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a format string. This affects Wire AVS (Audio, Video, and Signaling) 5.3 up to and including 6.x prior to 6.4, the Wire Secure Messenger ...

Wire Wire Wire Wire - Audio, Video, And Signaling Wire Wire Secure Messenger

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions before 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers ca...

Wire Wire Wire Wire-ios-transport

In Wire prior to 3.20.x, `shell.openExternal` was used without checking the URL. This vulnerability allows an malicious user to execute code on the victims machine by sending messages containing links with arbitrary protocols. The victim has to interact with the link and sees the...

wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-12-09, every member of a Conversation can remove a Bot from a Conversation due to a missing permissions check. Only Conversation admins should be able to remove...

Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they can take over an account by changing the email. This issue has been resolved in version 3.86 which uses a new endpoint which additionally requires an authentic...

wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid accent colors can be used by and sent between...

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook