5030 matches found
hudson.plugins.libvirt:libvirt-slave (1.7), net.praqma:matrix-reloaded (>=1.1.1, <=1.1.3) +60 more potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (1.420)
org.jenkins-ci.main:jenkins-core MAVEN version 1.420 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.libvirt:libvirt-slave 1.7 - net.praqma:matrix-reloaded =1.1.1, =1.8, =1.2, =1.7,...
Information Disclosure
matrix-react-sdk is vulnerable to Information Disclosure. The vulnerability is due to a malicious homeserver manipulating a user's account data to enable URL previews in encrypted rooms, causing any URLs in encrypted messages to be sent to the server. Attackers can use this to intercept URLs in...
CVE-2024-42347
matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the...
CVE-2024-42347 URL preview setting for a room is controllable by the homeserver in matrix-react-sdk
matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the...
CVE-2024-42347 URL preview setting for a room is controllable by the homeserver in matrix-react-sdk
matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the...
CVE-2024-42347 URL preview setting for a room is controllable by the homeserver in matrix-react-sdk
matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the...
CVE-2024-42347
Affects matrix-react-sdk (Matrix web client component). A malicious homeserver could manipulate a user’s account data to enable URL previews in end-to-end encrypted rooms, causing URLs from encrypted messages to be sent to the server. This is mitigated by upgrading to matrix-react-sdk version 3.1...
CVE-2024-42347
matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the...
matrix-react-skin (>=0.0.1, <=0.0.2), vector-web (0.3.0) potentially affected by CVE-2024-42347 via matrix-react-sdk (>=0.0.1, <=0.2.0)
matrix-react-sdk NPM version =0.0.1, =0.0.1, =0.0.2 - vector-web 0.3.0 Source cves: CVE-2024-42347 Source advisory: MEND:CVE-2024-42347...
GHSA-F83W-WQHC-CFP4 Matrix SDK for React's URL preview setting for a room is controllable by the homeserver
Impact A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the server. Even if the CVSS score would be 4.1 AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N the...
Matrix SDK for React's URL preview setting for a room is controllable by the homeserver
Impact A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the server. Even if the CVSS score would be 4.1 AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N the...
CVE-2024-42347: Exposure of Private Personal Information to an Unauthorized Actor
matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the...
PT-2024-29884
Name of the Vulnerable Software and Affected Versions matrix-react-sdk versions prior to 3.105.0 Description A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would b...
November 27, 2017—KB4051034 (Preview of Monthly Rollup)
November 27, 2017—KB4051034 Preview of Monthly Rollup Applies To Windows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4048957 released November 14, 2017 and also includes these new...
November 27, 2017—KB4050946 (Preview of Monthly Rollup)
November 27, 2017—KB4050946 Preview of Monthly Rollup Applies To Windows 8.1 Windows Server 2012 R2 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4048958 released November 14, 2017 and also includes these new quality improvements as a previe...
November 22, 2017—KB4055254 (OS Build 15063.729)
November 22, 2017—KB4055254 OS Build 15063.729 Applies To Windows 10, version 1703, all editions Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addresses an issue that affects some Epson...
November 21, 2017—KB4055038
November 21, 2017—KB4055038 Applies To Windows 8.1 Windows 7 Service Pack 1 Windows Server 2012 Standard Windows Server 2012 R2 Standard Windows Server 2008 R2 Service Pack 1 Summary This update addresses an issue that prevents some Epson SIDM Dot Matrix and TM POS printers from printing on...
SUSE CVE-2024-40648
matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The UserIdentity::isverified method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result retur...