Lucene search
+L

17 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-14784

Malicious code in bioql PyPI...

5.3CVSS5.4AI score0.002EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/25 11:56 p.m.•15 views

CVE-2025-27599

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

6.5CVSS6.8AI score0.00361EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/18 4:15 p.m.•18 views

CVE-2025-27599

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

6.5CVSS0.00361EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/04/18 3:49 p.m.•15 views

CVE-2025-27599 Element X Android vulnerable to loading malicious web pages via received intent

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

6.5CVSS6.4AI score0.00361EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/18 3:49 p.m.•72 views

CVE-2025-27599

Element X Android (Element X Android apps by element.io) is affected prior to version 25.04.2. A crafted hyperlink on a webpage or a locally installed malicious app can cause Element X up to 25.04.1 to load a webpage with permissions similar to Element Call and automatically grant temporary acces...

6.5CVSS6.4AI score0.00361EPSS
SaveExploits0References3
Mend
Mend
•added 2025/04/18 3:49 p.m.•6 views

CVE-2025-27599

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicious app, can force Element X up to version 25.04.1 to load a webpage with similar permissions to Element Call and automatically grant it...

6.9CVSS0.00361EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/04/18 12:00 a.m.•13 views

Element X Android 安全漏洞

Element X Android is an Android Matrix application from Element open source using Matrix Rust Sdk and Jetpack Compose. A security vulnerability exists in Element X Android versions prior to 25.04.2, which stems from a specially crafted hyperlink that could result in automatically granting tempora...

6.5CVSS6.4AI score0.00361EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/05 6:34 p.m.•30 views

CVE-2025-31127

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS6.9AI score0.002EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/03 6:15 p.m.•33 views

CVE-2025-31127

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS0.002EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/04/03 5:54 p.m.•16 views

CVE-2025-31127 Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS5.2AI score0.002EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/04/03 5:54 p.m.•34 views

CVE-2025-31127 Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS0.002EPSS
SaveExploits0References2
Mend
Mend
•added 2025/04/03 5:54 p.m.•6 views

CVE-2025-31127

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

6.9CVSS0.002EPSS
SaveExploits0References4
OSV
OSV
•added 2025/04/03 5:54 p.m.•49 views

CVE-2025-31127 Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Call

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS6.8AI score
SaveExploits0References4
CVE
CVE
•added 2025/04/03 5:54 p.m.•69 views

CVE-2025-31127

Element X Android (Matrix Android client by element.io) is affected in versions 0.4.16 through 25.03.3 where the entity controlling the element.json well-known file can, under certain conditions, access the media encryption keys used for an Element Call. The issue stems from how the well-known co...

5.3CVSS7AI score0.002EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•21 views

PT-2025-14782 · Element · Element

Name of the Vulnerable Software and Affected Versions: Element X Android versions 0.4.16 through 25.03.3 Description: The issue allows an entity in control of the element.json well-known file to access media encryption keys used for an Element Call under certain conditions. Recommendations: For...

5.3CVSS6.5AI score0.002EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•6 views

CVE-2025-31127: Exposure of Sensitive Information to an Unauthorized Actor

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25.03.3, the entity in control of the element.json well-known file is able, under certain conditions, to get access to the media encryption keys used for an Element Call call. Thi...

5.3CVSS5.8AI score0.002EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/03 12:00 a.m.•20 views

Element X Android 信息泄露漏洞

Element X Android is an Element open source Android Matrix application using Matrix Rust Sdk and Jetpack Compose. An information disclosure vulnerability exists in Element X Android versions 0.4.16 through 25.03.3, which originates in the element.json file and could lead to the disclosure of medi...

5.3CVSS6.1AI score0.002EPSS
SaveExploits0References2
Rows per page
Query Builder