Lucene search
+L

4084 matches found

SUSE CVE
SUSE CVE
•added 2023/03/31 1:57 a.m.•8 views

SUSE CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

8.2CVSS9AI score0.01185EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2023/03/31 12:00 a.m.•26 views

Fedora 37 : thunderbird (2023-d093c0cd27)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-d093c0cd27 advisory. Update to 102.9.1 ; https://www.mozilla.org/en-US/security/advisories/mfsa2023-12/ ; https://www.thunderbird.net/en-US/thunderbird/102.9.1/releasenotes/...

5.6AI score
SaveExploits0References1
OSV
OSV
•added 2023/03/30 8:19 p.m.•55 views

GHSA-MWQ8-FJPF-C2GR Prototype pollution in matrix-js-sdk (part 2)

Impact In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the Object.prototype, disrupting matrix-js-sdk functionality, causing denial of service and potentially affecting program logic. This is part 2, where...

8.2CVSS6.9AI score0.01185EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2023/03/30 5:43 p.m.•84 views

CVE-2023-28427

The Mozilla Foundation Security Advisory describes this flaw as: Thunderbird users who use the Matrix chat protocol were vulnerable to a denial-of-service attack...

7.5CVSS7.9AI score0.01185EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2023/03/30 12:00 a.m.•29 views

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2023-088-01)

The version of mozilla-thunderbird installed on the remote host is prior to 102.9.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-088-01 advisory. - matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sen...

8.2CVSS7.8AI score0.01185EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/03/29 7:34 p.m.•49 views

Prototype pollution in matrix-react-sdk

Impact In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the Object.prototype, disrupting matrix-react-sdk functionality, causing denial of service and potentially affecting program logic. This is part 2, where...

8.2CVSS7.5AI score0.00712EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2023/03/28 9:15 p.m.•9 views

DEBIAN-CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

8.2CVSS7.3AI score0.01185EPSS
SaveExploits0References1
NVD
NVD
•added 2023/03/28 9:15 p.m.•18 views

CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

8.2CVSS8.1AI score0.01185EPSS
SaveExploits0References5
NVD
NVD
•added 2023/03/28 9:15 p.m.•23 views

CVE-2022-36059

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

8.2CVSS8AI score0.0094EPSS
SaveExploits0References1
NVD
NVD
•added 2023/03/28 9:15 p.m.•47 views

CVE-2023-28103

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the Object.prototype, disrupting matrix-react-sdk functionality, causing denial of service and...

8.2CVSS7.9AI score0.00712EPSS
SaveExploits0References2
OSV
OSV
•added 2023/03/28 9:15 p.m.•6 views

DEBIAN-CVE-2022-36059

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

5.3CVSS6.4AI score0.0094EPSS
SaveExploits0References1
NVD
NVD
•added 2023/03/28 9:15 p.m.•60 views

CVE-2022-36060

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remainder of the application can appear...

8.2CVSS8.1AI score0.00906EPSS
SaveExploits0References1
Prion
Prion
•added 2023/03/28 9:15 p.m.•33 views

Design/Logic Flaw

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the Object.prototype, disrupting matrix-react-sdk functionality, causing denial of service and...

6.4CVSS7.7AI score0.00712EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/03/28 9:15 p.m.•26 views

Code injection

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

5CVSS6.5AI score0.0094EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/03/28 9:15 p.m.•20 views

Design/Logic Flaw

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

6.4CVSS8.1AI score0.01185EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
•added 2023/03/28 9:15 p.m.•39 views

CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

8.2CVSS6.9AI score0.01185EPSS
SaveExploits0References4
Prion
Prion
•added 2023/03/28 9:15 p.m.•26 views

Design/Logic Flaw

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remainder of the application can appear...

5CVSS5.5AI score0.00906EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/03/28 9:15 p.m.•12 views

UBUNTU-CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

8.2CVSS5.7AI score0.01185EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2023/03/28 8:37 p.m.•12 views

CVE-2022-36060 Prototype pollution in matrix-react-sdk

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remainder of the application can appear...

8.2CVSS8.1AI score0.00906EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/03/28 8:37 p.m.•64 views

CVE-2022-36060 Prototype pollution in matrix-react-sdk

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remainder of the application can appear...

8.2CVSS8.3AI score0.00906EPSS
SaveExploits0References1
Rows per page
Query Builder