CVE-2024-11813

creationtimestamp| type| source ---|---|--- 2024-12-04 03:07:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113592347937896055 2024-12-04 05:02:37+00:00| seen| https://t.me/cvedetector/11938...

CVE-2024-45205

creationtimestamp| type| source ---|---|--- 2024-12-04 02:12:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113592131494961987 2024-12-04 04:12:18+00:00| seen| https://t.me/cvedetector/11927...

CVE-2024-12053

creationtimestamp| type| source ---|---|--- 2024-12-03 18:51:47+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113590396950354441 2024-12-03 18:56:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113590416932406147 2024-12-03 20:40:58+00:00| seen|...

CVE-2024-53921

creationtimestamp| type| source ---|---|--- 2024-12-03 18:25:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113590292174896833 2024-12-03 20:40:56+00:00| seen| https://t.me/cvedetector/11907...

CVE-2024-45204

creationtimestamp| type| source ---|---|--- 2024-12-03 18:19:49+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113590271100041825 2024-12-04 02:12:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113592131480450507 2024-12-04 04:12:17+00:00| seen|...

CVE-2024-37302

Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...

CVE-2024-52805

Synapse is an open-source Matrix homeserver. In Synapse before 1.120.1, multipart/form-data requests can in certain configurations transiently increase memory consumption beyond expected levels while processing the request, which can be used to amplify denial of service attacks. Synapse 1.120.1...

CVE-2024-53867

Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1...

CVE-2024-53863

Synapse is an open-source Matrix homeserver. In Synapse versions before 1.120.1, enabling the dynamicthumbnails option or processing a specially crafted request could trigger the decoding and thumbnail generation of uncommon image formats, potentially invoking external tools like Ghostscript for...

CVE-2024-52815

Synapse is an open-source Matrix homeserver. Synapse versions before 1.120.1 fail to properly validate invites received over federation. This vulnerability allows a malicious server to send a specially crafted invite that disrupts the invited user's /sync functionality. Synapse 1.120.1 rejects su...

CVE-2024-52805

creationtimestamp| type| source ---|---|--- 2024-12-03 17:09:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113589996255229449 2024-12-03 20:40:50+00:00| seen| https://t.me/cvedetector/11904...

CVE-2024-9978

creationtimestamp| type| source ---|---|--- 2024-12-03 12:31:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113588901034501300 2024-12-03 14:49:40+00:00| seen| https://t.me/cvedetector/11881...

CVE-2024-10074

creationtimestamp| type| source ---|---|--- 2024-12-03 12:31:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113588900992984256 2024-12-03 14:49:41+00:00| seen| https://t.me/cvedetector/11883...

CVE-2024-11220

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-03 2024-12-06 17:51:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113607147250428125 2024-12-06 19:48:46+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-11325

creationtimestamp| type| source ---|---|--- 2024-12-03 09:40:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113588228601429704 2024-12-03 12:19:18+00:00| seen| https://t.me/cvedetector/11875...

CVE-2024-45106

creationtimestamp| type| source ---|---|--- 2024-12-03 09:17:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113588139136376999 2024-12-03 12:19:20+00:00| seen| https://t.me/cvedetector/11878...

CVE-2024-11844

creationtimestamp| type| source ---|---|--- 2024-12-03 08:37:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113587982289348551 2024-12-03 10:39:05+00:00| seen| https://t.me/cvedetector/11874...

CVE-2024-11805

creationtimestamp| type| source ---|---|--- 2024-12-03 07:57:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113587825077392092 2024-12-03 10:38:59+00:00| seen| https://t.me/cvedetector/11870...

CVE-2024-11898

creationtimestamp| type| source ---|---|--- 2024-12-03 07:57:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113587825106057622 2024-12-03 10:39:00+00:00| seen| https://t.me/cvedetector/11871...

CVE-2024-11732

creationtimestamp| type| source ---|---|--- 2024-12-03 07:42:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113587766078809081 2024-12-03 10:38:57+00:00| seen| https://t.me/cvedetector/11869...