wire kayıtları
wire üreticisine ait 29 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %17,2
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-134 Use of Externally-Controlled Format String3
- CWE-755 Improper Handling of Exceptional Conditions2
- CWE-20 Improper Input Validation2
- CWE-285 Improper Authorization2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWEBug bounty kapsamı
Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.
Tüm kayıtlar
29 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-27853İstismar yok | Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a forwire · wire · CWE-134 | Kritik9,8 | — | %3,9 | 27 Eki 2020 |
40Planlayın | CVE-2021-41193İstismar yok | Use of Externally-Controlled Format String in wire-avswire · wire-audio video signaling · CWE-134 | Kritik9,8 | — | %2,5 | 1 Mar 2022 |
39İzleyin | CVE-2021-41093İstismar yok | Account takeover when having only access to a user's short lived tokenwire · wire · CWE-285 | Kritik9,8 | — | %1,5 | 4 Eki 2021 |
39İzleyin | CVE-2021-41100İstismar yok | Account takeover when having only access to a user's short lived token in wire-serverwire · wire-server · CWE-285 | Kritik9,8 | — | %0,9 | 4 Eki 2021 |
38İzleyin | CVE-2021-21382İstismar yok | Unsafe loopback forwarding interface in Restundwire · restund · CWE-668 | Kritik9,6 | — | %1,5 | 11 Haz 2021 |
35İzleyin | CVE-2023-48221İstismar yok | wire-avs remote format string vulnerabilitywire · audio\, video\, and signaling · CWE-134 | Yüksek8,8 | — | %0,9 | 20 Kas 2023 |
33İzleyin | CVE-2020-15258İstismar yok | Insecure use of shell.openExternal in Wirewire · wire · CWE-20 | Yüksek8,0 | — | %2,1 | 16 Eki 2020 |
32İzleyin | CVE-2022-23610İstismar yok | Improper Verification of Cryptographic Signature in wire-serverwire · wire-server · CWE-347 | Yüksek8,1 | — | %0,7 | 16 Mar 2022 |
32İzleyin | CVE-2022-31122İstismar yok | Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creationwire · wire server · CWE-287 | Yüksek8,1 | — | %0,7 | 18 Eki 2022 |
30İzleyin | CVE-2018-8909İstismar yok | The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a wire · wire · CWE-22 | Yüksek7,5 | — | %1,6 | 22 Mar 2018 |
30İzleyin | CVE-2021-41119İstismar yok | DoS vulnerabiliity in wire-server json parserwire · wire-server · CWE-400 | Yüksek7,5 | — | %1,4 | 13 Nis 2022 |
26İzleyin | CVE-2022-23625İstismar yok | DoS vulnerability: Malformed Resource Identifierswire · wire · CWE-755 | Orta6,5 | — | %1,2 | 11 Mar 2022 |
26İzleyin | CVE-2021-21400İstismar yok | Entering code in App Lock modal sends input to conversationwire · wire-webapp · CWE-200 | Orta6,5 | — | %1,1 | 2 Nis 2021 |
26İzleyin | CVE-2021-21396İstismar yok | Bulk list client endpoint exposes too much metadata about a clientwire · wire server · CWE-200 | Orta6,5 | — | %1,1 | 26 Mar 2021 |
26İzleyin | CVE-2021-32666İstismar yok | Asset DoS vulnerabilitywire · wire · CWE-20 | Orta6,5 | — | %0,9 | 3 Haz 2021 |
26İzleyin | CVE-2023-22737İstismar yok | wire-server vulnerable to unauthorized removal of Bots from Conversationswire · wire · CWE-280 | Orta6,5 | — | %0,7 | 27 Oca 2023 |
26İzleyin | CVE-2022-31009İstismar yok | DoS vulnerability: Invalid Accent Colorswire · wire · CWE-617 | Orta6,5 | — | %0,7 | 23 Haz 2022 |
26İzleyin | CVE-2021-32665İstismar yok | Verified groups not reliablewire · wire · CWE-345 | Orta6,5 | — | %0,5 | 3 Haz 2021 |
24İzleyin | CVE-2022-24799İstismar yok | Cross Site Scripting in Wire Webappwire · wire-webapp · CWE-79 | Orta6,1 | — | %1,0 | 20 Nis 2022 |
24İzleyin | CVE-2022-29168İstismar yok | Cross Site Scripting in Wire Messageswire · wire-webapp · CWE-79 | Orta6,1 | — | %0,8 | 25 Haz 2022 |
24İzleyin | CVE-2021-32683İstismar yok | XSS through createObjectURLwire · wire-webapp · CWE-79 | Orta6,1 | — | %0,8 | 15 Haz 2021 |
22İzleyin | CVE-2021-41101İstismar yok | CORS `Access-Control-Allow-Origin` settings are too lenientwire · wire server · CWE-79 | Orta5,7 | — | %0,7 | 30 Eyl 2021 |
22İzleyin | CVE-2025-48066İstismar yok | wire-webapp has no database deletion on client logoutwire · wire-webapp · CWE-226 | Orta5,5 | — | %0,1 | 22 May 2025 |
21İzleyin | CVE-2022-39380İstismar yok | wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Renderingwire · wire-webapp · CWE-755 | Orta5,3 | — | %0,6 | 27 Oca 2023 |
18İzleyin | CVE-2022-43673İstismar yok | Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for a limited period of wire · wire · CWE-532 | Orta4,7 | — | %0,3 | 18 Kas 2022 |
- CVE-2020-2785340Planlayın
Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a for
KritikCVSS 9,8İstismar yokEPSS %4wire · wire27 Eki 2020
- CVE-2021-4119340Planlayın
Use of Externally-Controlled Format String in wire-avs
KritikCVSS 9,8İstismar yokEPSS %2wire · wire-audio video signaling1 Mar 2022
- CVE-2021-4109339İzleyin
Account takeover when having only access to a user's short lived token
KritikCVSS 9,8İstismar yokEPSS %1wire · wire4 Eki 2021
- CVE-2021-4110039İzleyin
Account takeover when having only access to a user's short lived token in wire-server
KritikCVSS 9,8İstismar yokEPSS %1wire · wire-server4 Eki 2021
- CVE-2021-2138238İzleyin
Unsafe loopback forwarding interface in Restund
KritikCVSS 9,6İstismar yokEPSS %1wire · restund11 Haz 2021
- CVE-2023-4822135İzleyin
wire-avs remote format string vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1wire · audio\, video\, and signaling20 Kas 2023
- CVE-2020-1525833İzleyin
Insecure use of shell.openExternal in Wire
YüksekCVSS 8,0İstismar yokEPSS %2wire · wire16 Eki 2020
- CVE-2022-2361032İzleyin
Improper Verification of Cryptographic Signature in wire-server
YüksekCVSS 8,1İstismar yokEPSS %1wire · wire-server16 Mar 2022
- CVE-2022-3112232İzleyin
Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creation
YüksekCVSS 8,1İstismar yokEPSS %1wire · wire server18 Eki 2022
- CVE-2018-890930İzleyin
The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a
YüksekCVSS 7,5İstismar yokEPSS %2wire · wire22 Mar 2018
- CVE-2021-4111930İzleyin
DoS vulnerabiliity in wire-server json parser
YüksekCVSS 7,5İstismar yokEPSS %1wire · wire-server13 Nis 2022
- CVE-2022-2362526İzleyin
DoS vulnerability: Malformed Resource Identifiers
OrtaCVSS 6,5İstismar yokEPSS %1wire · wire11 Mar 2022
- CVE-2021-2140026İzleyin
Entering code in App Lock modal sends input to conversation
OrtaCVSS 6,5İstismar yokEPSS %1wire · wire-webapp2 Nis 2021
- CVE-2021-2139626İzleyin
Bulk list client endpoint exposes too much metadata about a client
OrtaCVSS 6,5İstismar yokEPSS %1wire · wire server26 Mar 2021
- CVE-2021-3266626İzleyin
Asset DoS vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1wire · wire3 Haz 2021
- CVE-2023-2273726İzleyin
wire-server vulnerable to unauthorized removal of Bots from Conversations
OrtaCVSS 6,5İstismar yokEPSS %1wire · wire27 Oca 2023
- CVE-2022-3100926İzleyin
DoS vulnerability: Invalid Accent Colors
OrtaCVSS 6,5İstismar yokEPSS %1wire · wire23 Haz 2022
- CVE-2021-3266526İzleyin
Verified groups not reliable
OrtaCVSS 6,5İstismar yokEPSS %0wire · wire3 Haz 2021
- CVE-2022-2479924İzleyin
Cross Site Scripting in Wire Webapp
OrtaCVSS 6,1İstismar yokEPSS %1wire · wire-webapp20 Nis 2022
- CVE-2022-2916824İzleyin
Cross Site Scripting in Wire Messages
OrtaCVSS 6,1İstismar yokEPSS %1wire · wire-webapp25 Haz 2022
- CVE-2021-3268324İzleyin
XSS through createObjectURL
OrtaCVSS 6,1İstismar yokEPSS %1wire · wire-webapp15 Haz 2021
- CVE-2021-4110122İzleyin
CORS `Access-Control-Allow-Origin` settings are too lenient
OrtaCVSS 5,7İstismar yokEPSS %1wire · wire server30 Eyl 2021
- CVE-2025-4806622İzleyin
wire-webapp has no database deletion on client logout
OrtaCVSS 5,5İstismar yokEPSS %0wire · wire-webapp22 May 2025
- CVE-2022-3938021İzleyin
wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering
OrtaCVSS 5,3İstismar yokEPSS %1wire · wire-webapp27 Oca 2023
- CVE-2022-4367318İzleyin
Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for a limited period of
OrtaCVSS 4,7İstismar yokEPSS %0wire · wire18 Kas 2022