CVE-2023-22737
- EPSS 0.06%
- Veröffentlicht 28.01.2023 00:15:08
- Zuletzt bearbeitet 21.11.2024 07:45:19
wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-12-09, every member of a Conversation can remove a Bot from a Conversation due to a missing permissions check. Only Conversation a...
CVE-2022-43673
- EPSS 0.06%
- Veröffentlicht 18.11.2022 20:15:10
- Zuletzt bearbeitet 30.04.2025 14:15:26
Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for a limited period of time) from the AppData\Roaming\Wire\IndexedDB\https_app.wire.com_0.indexeddb.leveldb database.
CVE-2022-31009
- EPSS 0.25%
- Veröffentlicht 23.06.2022 07:15:07
- Zuletzt bearbeitet 21.11.2024 07:03:42
wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid accent colors c...
CVE-2022-23625
- EPSS 0.38%
- Veröffentlicht 11.03.2022 18:15:31
- Zuletzt bearbeitet 21.11.2024 06:48:57
Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malfor...
CVE-2021-41093
- EPSS 0.36%
- Veröffentlicht 04.10.2021 19:15:08
- Zuletzt bearbeitet 21.11.2024 06:25:26
Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they can take over an account by changing the email. This issue has been resolved in version 3.86 which uses a new endpoint which addi...
CVE-2021-41094
- EPSS 0.04%
- Veröffentlicht 04.10.2021 19:15:08
- Zuletzt bearbeitet 21.11.2024 06:25:27
Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating encryption k...
CVE-2021-32755
- EPSS 0.07%
- Veröffentlicht 13.07.2021 21:15:07
- Zuletzt bearbeitet 21.11.2024 06:07:40
Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for ...
CVE-2021-32666
- EPSS 0.31%
- Veröffentlicht 03.06.2021 22:15:08
- Zuletzt bearbeitet 21.11.2024 06:07:29
wire-ios is the iOS version of Wire, an open-source secure messaging app. In wire-ios versions 3.8.0 and prior, a vulnerability exists that can cause a denial of service between users. If a user has an invalid assetID for their profile picture and it...
CVE-2021-32665
- EPSS 0.12%
- Veröffentlicht 03.06.2021 21:15:07
- Zuletzt bearbeitet 21.11.2024 06:07:29
wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incorrectly set to "unverified. This occurs when: - Self user is added to a new conversation - S...
CVE-2021-21301
- EPSS 0.37%
- Veröffentlicht 11.02.2021 18:15:16
- Zuletzt bearbeitet 21.11.2024 05:47:58
Wire is an open-source collaboration platform. In Wire for iOS (iPhone and iPad) before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a...