Filter
Software
matrix synapse
33
matrix javascript sdk
10
matrix sydent
7
matrix matrix irc bridge
6
matrix software development kit
4
matrix dendrite
2
matrix element
2
matrix matrix-appservice-bridge
2
matrix olm
2
matrix gomatrixserverlib
1
matrix hookshot
1
matrix matrix ftp server
1
matrix matrix-android-sdk2
1
matrix matrix-react-sdk
1
matrix matrix-rust-sdk
1
matrix react sdk
1
npm/matrix-js-sdkA room with itself as a its predecessor will freeze matrix-js-sdk
5.3
First published (updated )
npm/matrix-react-sdkURL preview setting for a room is controllable by the homeserver in matrix-react-sdk
7.7
First published (updated )
Fedoraproject FedoraSynapse vulnerable to leak of remote user device information
5.3
First published (updated )
Fedoraproject Fedoramatrix-synapse vulnerable to denial of service due to malicious server ACL events
4.9
First published (updated )
Matrix HookshotSandbox escape for instances that have enabled transformation functions in matrix-hookshot
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraImproper validation of receipts allows forged read receipts in matrix synapse
4.3
First published (updated )
Fedoraproject FedoraTemporary storage of plaintext passwords during password changes in matrix synapse
3.7
First published (updated )
Matrix Matrix Irc Bridgematrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms
3.7
First published (updated )
npm/matrix-appservice-bridgematrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs
6.5
First published (updated )
Matrix Matrix Irc Bridgematrix-appservice-irc IRC command injection via admin commands containing newlines
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Matrix SydentSydent does not verify email server certificates
9.3
First published (updated )
Matrix SynapseURL deny list bypass via oEmbed and image URLs when generating previews in Synapse
5.4
First published (updated )
Matrix SynapseImproper checks for deactivated users during login in synapse
5.4
First published (updated )
Matrix SynapseSynapse Denial of service due to incorrect application of event authorization rules during state resolution
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Matrix SynapseSynapse does not apply enough checks to servers requesting auth events of events in a room
First published (updated )
Matrix Javascript Sdkmatrix-js-sdk vulnerable to invisible eavesdropping in group calls
5.3
First published (updated )
Matrix React SdkPrototype pollution in matrix-react-sdk
8.2
First published (updated )
npm/matrix-js-sdkPrototype pollution in matrix-js-sdk
8.2
First published (updated )
Matrix SynapseUncontrolled Resource Consumption in Matrix Synapse
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Matrix Matrix Irc Bridgematrix-appservice-irc PgDataStore.ts sql injection
5.6
First published (updated )
Matrix Matrix-rust-sdkWhen matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder
8.6
First published (updated )
Matrix Software Development KitMatrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions
7.5
First published (updated )
Matrix Software Development KitMatrix iOS SDK vulnerable ton Olm/Megolm protocol confusion
8.6
First published (updated )
Matrix Software Development Kitmatrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion
8.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Matrix Software Development Kitmatrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions
7.5
First published (updated )
Mozilla ThunderbirdMatrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions
7.5
First published (updated )
Mozilla ThunderbirdMatrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
8.6
First published (updated )
Mozilla ThunderbirdMatrix Javascript SDK vulnerable to Olm/Megolm protocol confusion
8.6
First published (updated )
Matrix Javascript SdkMatrix Javascript SDK improper beacon events can cause availability issues
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.