850 matches found
Mageia: Security Advisory (MGASA-2020-0428)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2016-0340)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2022-4889 · Twisted +4 · Twisted +4
Name of the Vulnerable Software and Affected Versions: Twisted affected versions not specified Description: The issue is related to the exposure of cookies and authorization headers when following cross-origin redirects. This problem is present in the twisted.web.RedirectAgent and...
adyanutils (>=0.4.0 <=0.8.6), binance-futures-connector (>=1.6.0 <=1.7.0) +1 more potentially affected by CVE-2022-21716 via twisted (=22.1.0)
twisted PYPI version =22.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - adyanutils =0.4.0, =1.6.0, =1.1.0, =1.1.2 Source cves: CVE-2022-21716 Source advisory: SNYK:PYTHON-TWISTED-2326700...
Denial of Service (DoS)
Overview Twisted is an event-based network programming and multi-protocol integration framework. Affected versions of this package are vulnerable to Denial of Service DoS by accepting an infinite amount of data for the peer's SSH version identifier. it is possible to be exploited via SSH transpor...
PT-2021-7398
Name of the Vulnerable Software and Affected Versions Twisted versions prior to 22.2.0 Description The Twisted SSH client and server implementation is vulnerable to a denial of service attack due to its ability to accept an infinite amount of data for the peer's SSH version identifier, resulting ...
[SECURITY] Fedora 34 Update: matrix-synapse-1.48.0-1.fc34
Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...
[SECURITY] Fedora 35 Update: matrix-synapse-1.48.0-1.fc35
Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...
CVE-2021-41281
Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is required for the affected endpoint. T...
Authentication flaw
Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is required for the affected endpoint. T...
PYSEC-2021-436
Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is required for the affected endpoint. T...
CVE-2021-41281 Path traversal in Matrix Synapse
Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is required for the affected endpoint. T...
CVE-2021-41281
Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is required for the affected endpoint. T...
CVE-2021-41281
CVE-2021-41281 affects Synapse (Matrix homeserver) versions before 1.47.1 with the media repository enabled. A path traversal vulnerability lets an attacker cause a remote file to be downloaded into an arbitrary directory without authentication; the impact is mitigated by the last two path compon...
CVE-2021-41281
Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is required for the affected endpoint. T...
[SECURITY] Fedora 35 Update: matrix-synapse-1.41.1-1.fc35
Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...
[SECURITY] Fedora 34 Update: matrix-synapse-1.41.1-1.fc34
Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...
CVE-2020-10108 affecting package python-twisted 19.2.1-5
CVE-2020-10108 affecting package python-twisted 19.2.1-5. An upgraded version of the package is available that resolves this issue...