Latest vulnerabilities for vendor "matrix"

Where

Sort:

Software

matrix synapse

matrix javascript sdk

matrix matrix series

matrix sydent

matrix-appservice-bridge

matrix olm

matrix series

matrix software development kit

matrix dendrite

matrix hookshot

matrix matrix irc bridge node.js

matrix react sdk

matrix element android

matrix matrix ftp server

matrix matrix-android-sdk2 android

matrix matrix-appservice-bridge node.js

matrix matrix-rust-sdk

matrix rust sdk

rust/matrix-sdk-basematrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values

Risk 43

Severity

7.5

First published (updated )

CVE-2025-66622

matrix Matrix specificationThe Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution befor…

Risk 50

Severity

7.1

First published (updated )

CVE-2025-49090

matrix Matrix specificationThe Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event unique…

Risk 48

Severity

7.1

First published (updated )

CVE-2025-54315

matrix Javascript SDKmatrix-js-sdk has insufficient validation when considering a room to be upgraded by another

Risk 18

Severity

2.7

First published (updated )

CVE-2025-59160

ASPECT ASPECT-EnterpriseSQL Injection 2nd Order

Risk 81

Severity

9.4

First published (updated )

CVE-2024-13955

ASPECT ASPECT-EnterpriseSensitive Information disclosed in log files

Risk 35

Severity

6.9

First published (updated )

CVE-2024-13953

ASPECT ASPECT-EnterpriseOne way hash with predictable salt

Risk 58

Severity

7.6

First published (updated )

CVE-2024-13951

ASPECT ASPECT-EnterpriseInsecure Permissions

Risk 47

Severity

7.3

First published (updated )

CVE-2024-13948

ASPECT ASPECT-EnterpriseExternal System or Configuration Control

Risk 50

Severity

7.1

First published (updated )

CVE-2024-13947

synapse SynapseSynapse vulnerable to federation denial of service via malformed events

Risk 31

Severity

7.5

EPSS

0.38%

First published (updated )

CVE-2025-30355

npm/matrix-appservice-ircMatrix IRC Bridge allows IRC command injection to own puppeted user

Risk 16

Severity

4.3

EPSS

0.03%

First published (updated )

CVE-2025-27146

matrix hookshotmatrix-hookshot has a Potential Denial of Service when Hookshot is configured with GitHub support

Risk 27

Severity

6.5

EPSS

0.04%

First published (updated )

CVE-2025-23197

ABB ASPECT - EnterpriseForce Change of Default Credentials

Risk 87

Severity

First published (updated )

CVE-2024-51555

ABB Aspect-ent-2 Firmwareoff-by-one-error

Risk 86

Severity

9.8

First published (updated )

CVE-2024-51554

ABB Aspect-ent-2 FirmwareDefault Credentials

Risk 87

Severity

First published (updated )

CVE-2024-51551

ABB Aspect-ent-12 FirmwareData Validation / Sanitization

Risk 95

Severity

Exploited

First published (updated )

CVE-2024-51550

ABB Aspect-ent-12 FirmwareService Control

Risk 57

Severity

8.8

First published (updated )

CVE-2024-51544

ABB Aspect-ent-2 FirmwarePHP Session Fixation

Risk 73

Severity

First published (updated )

CVE-2024-11317

ABB Aspect-ent-2 FirmwareSSRF Server Side Request Forgery

Risk 82

Severity

9.9

First published (updated )

CVE-2024-6784

pip/matrix-synapseSynapse unauthenticated writes to the media repository allow planting of problematic content

Risk 28

Severity

5.3

First published (updated )

CVE-2024-37303

pip/matrix-synapseSynapse denial of service through media disk space consumption

Risk 45

Severity

7.5

First published (updated )

CVE-2024-37302

pip/matrix-synapseSynapse allows unsupported content types to lead to memory exhaustion

Risk 45

Severity

8.2

First published (updated )

CVE-2024-52805

pip/matrix-synapseSynapse allows a a malformed invite to break the invitee's `/sync`

Risk 49

Severity

8.7

First published (updated )

CVE-2024-52815

pip/matrix-synapseSynapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders

Risk 69

Severity

9.1

First published (updated )

CVE-2024-53863

matrix libolmAn issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cac…

Risk 32

Severity

5.3

First published (updated )

CVE-2024-45191

matrix libolmAn issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use o…

Risk 32

Severity

5.3

First published (updated )

CVE-2024-45192

matrix libolmAn issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due…

Risk 22

Severity

4.3

First published (updated )

CVE-2024-45193

npm/matrix-js-sdkA room with itself as a its predecessor will freeze matrix-js-sdk

Risk 28

Severity

5.3

First published (updated )

CVE-2024-42369

npm/matrix-react-sdkURL preview setting for a room is controllable by the homeserver in matrix-react-sdk

Risk 45

Severity

7.7

First published (updated )

CVE-2024-42347

Fedoraproject FedoraSynapse's V2 state resolution weakness allows DoS from remote room members

Risk 28

Severity

6.5

EPSS

0.04%

First published (updated )

CVE-2024-31208

Trending

Vendor Risk Score

Software

rust/matrix-sdk-basematrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values

matrix Matrix specificationThe Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution befor…

matrix Matrix specificationThe Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event unique…

matrix Javascript SDKmatrix-js-sdk has insufficient validation when considering a room to be upgraded by another

ASPECT ASPECT-EnterpriseSQL Injection 2nd Order

Don't miss critical vulnerabilities

ASPECT ASPECT-EnterpriseSensitive Information disclosed in log files

ASPECT ASPECT-EnterpriseOne way hash with predictable salt

ASPECT ASPECT-EnterpriseInsecure Permissions

ASPECT ASPECT-EnterpriseExternal System or Configuration Control

synapse SynapseSynapse vulnerable to federation denial of service via malformed events

Don't miss critical vulnerabilities

npm/matrix-appservice-ircMatrix IRC Bridge allows IRC command injection to own puppeted user

matrix hookshotmatrix-hookshot has a Potential Denial of Service when Hookshot is configured with GitHub support

ABB ASPECT - EnterpriseForce Change of Default Credentials

ABB Aspect-ent-2 Firmwareoff-by-one-error

ABB Aspect-ent-2 FirmwareDefault Credentials

Don't miss critical vulnerabilities

ABB Aspect-ent-12 FirmwareData Validation / Sanitization

ABB Aspect-ent-12 FirmwareService Control

ABB Aspect-ent-2 FirmwarePHP Session Fixation

ABB Aspect-ent-2 FirmwareSSRF Server Side Request Forgery

pip/matrix-synapseSynapse unauthenticated writes to the media repository allow planting of problematic content

Don't miss critical vulnerabilities

pip/matrix-synapseSynapse denial of service through media disk space consumption

pip/matrix-synapseSynapse allows unsupported content types to lead to memory exhaustion

pip/matrix-synapseSynapse allows a a malformed invite to break the invitee's `/sync`

pip/matrix-synapseSynapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders

matrix libolmAn issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cac…

Don't miss critical vulnerabilities

matrix libolmAn issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use o…

matrix libolmAn issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due…

npm/matrix-js-sdkA room with itself as a its predecessor will freeze matrix-js-sdk

npm/matrix-react-sdkURL preview setting for a room is controllable by the homeserver in matrix-react-sdk

Fedoraproject FedoraSynapse's V2 state resolution weakness allows DoS from remote room members

Don't miss critical vulnerabilities

Company

Resources

Contact