4057 matches found
DEBIAN-CVE-2020-26890
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...
CVE-2020-26890
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...
Code injection
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...
PYSEC-2020-237
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...
PYSEC-2020-237
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...
UBUNTU-CVE-2020-26890
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...
CVE-2020-26890
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...
CVE-2020-26890
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...
CVE-2020-26890
Matrix Synapse prior to 1.20.0 allowed non-standard NaN, Infinity, and -Infinity values in m.room.member event fields, enabling remote DoS against federation and Matrix clients; impact can persist across replicated servers and requires manual redaction. The connected advisories note upgrading to ...
CVE-2020-26890: Improper Input Validation
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...
Matrix Synapse Injection Vulnerability
Matrix Synapse is a Matrix Management Server implementation from the Matrix.org Foundation in the UK. A security vulnerability exists in Matrix Synapse versions prior to 1.20.0 that allows the use of non-standard NaN, Infinity, and -Infinity JSON values in the fields of the m.room.member event,...
CVE-2020-12496 ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 2.x exposures sensitive information to an unauthorized actor
Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 and Memograph M Neutral/Private Label RSG45, ORSG45 with Firmware version V2.0.0 and above is prone to exposure of sensitive information to an unauthorized actor. The firmware release has a dynamic token for each request submitted to t...
CVE-2020-12496: Exposure of Sensitive Information to an Unauthorized Actor
Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 and Memograph M Neutral/Private Label RSG45, ORSG45 with Firmware version V2.0.0 and above is prone to exposure of sensitive information to an unauthorized actor. The firmware release has a dynamic token for each request submitted to t...
ALEA-2020:4803 perl:5.30 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
perl:5.30 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
perl:5.30 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
ALEA-2020:4802 perl:5.30 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
perl:5.30 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
ALEA-2020:4767 perl:5.30 metadata for the AlmaLinux 8 module matrix
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
[ASA-202011-4] matrix-synapse: cross-site scripting
Arch Linux Security Advisory ASA-202011-4 ========================================= Severity: High Date : 2020-11-03 CVE-ID : CVE-2020-26891 Package : matrix-synapse Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-1252 Summary ======= The package matrix-synapse...