Lucene search
+L

15 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-14784

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.00197EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/25 11:56 p.m.•12 views

CVE-2025-27599

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

6.5CVSS6.8AI score0.00361EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/18 4:15 p.m.•15 views

CVE-2025-27599

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

6.5CVSS0.00361EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/18 3:49 p.m.•69 views

CVE-2025-27599

Element X Android (Element X Android apps by element.io) is affected prior to version 25.04.2. A crafted hyperlink on a webpage or a locally installed malicious app can cause Element X up to 25.04.1 to load a webpage with permissions similar to Element Call and automatically grant temporary acces...

6.5CVSS6.4AI score0.00361EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/04/18 3:49 p.m.•11 views

CVE-2025-27599 Element X Android vulnerable to loading malicious web pages via received intent

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

6.5CVSS6.4AI score0.00361EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/18 12:00 a.m.•10 views

Element X Android 安全漏洞

Element X Android is an Android Matrix application from Element open source using Matrix Rust Sdk and Jetpack Compose. A security vulnerability exists in Element X Android versions prior to 25.04.2, which stems from a specially crafted hyperlink that could result in automatically granting tempora...

6.5CVSS6.4AI score0.00361EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/05 6:34 p.m.•24 views

CVE-2025-31127

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS6.9AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/03 6:15 p.m.•28 views

CVE-2025-31127

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS0.00197EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/03 5:54 p.m.•59 views

CVE-2025-31127

Element X Android (Matrix Android client by element.io) is affected in versions 0.4.16 through 25.03.3 where the entity controlling the element.json well-known file can, under certain conditions, access the media encryption keys used for an Element Call. The issue stems from how the well-known co...

5.3CVSS7AI score0.00197EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/04/03 5:54 p.m.•11 views

CVE-2025-31127 Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS5.2AI score0.00197EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/04/03 5:54 p.m.•30 views

CVE-2025-31127 Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS0.00197EPSS
SaveExploits0References2
OSV
OSV
•added 2025/04/03 5:54 p.m.•46 views

CVE-2025-31127 Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS6.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•0 views

CVE-2025-31127: Exposure of Sensitive Information to an Unauthorized Actor

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS5.8AI score0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/03 12:00 a.m.•15 views

Element X Android 信息泄露漏洞

Element X Android is an Element open source Android Matrix application using Matrix Rust Sdk and Jetpack Compose. An information disclosure vulnerability exists in Element X Android versions 0.4.16 through 25.03.3, which originates in the element.json file and could lead to the disclosure of medi...

5.3CVSS6.1AI score0.00197EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•15 views

PT-2025-14782 · Element · Element

Name of the Vulnerable Software and Affected Versions: Element X Android versions 0.4.16 through 25.03.3 Description: The issue allows an entity in control of the element.json well-known file to access media encryption keys used for an Element Call under certain conditions. Recommendations: For...

5.3CVSS6.5AI score0.00197EPSS
SaveExploits0References7
Rows per page
Query Builder