Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Telegram Component: Telegram Messenger Clear all filters
TI-2018-12653 CVE-2018-17780 · GHSA-r3p8-5cf3-rwmg

Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks…

Priority LOW 32

Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01803 Published 2018-09-29 No fix listed CWE-200
TI-2017-12965 CVE-2017-17715 · GHSA-5vpw-rqv4-gcp5

The saveFile method in MediaController.java in the Telegram Messenger application before…

Priority MEDIUM 42

The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows directory traversal via a pathname obtained in a file-transfer request from a remote peer, as demonst…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01741 Published 2017-12-16 No fix listed CWE-22