Lucene search
+L

1161 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/14 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-61672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacke...

5.3CVSS5.6AI score0.00434EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/10/08 5:51 p.m.4 views

Improper Validation of Specified Type of Input

Overview matrix-synapse is an ecosystem for open federated Instant Messaging and VoIP. Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input due to insufficient validation of device keys. An attacker can disrupt federation functionality and unpredictab...

5.4CVSS6.8AI score0.00434EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/08 5:51 p.m.4 views

GHSA-FH66-FCV5-JJFR Synapse's invalid device keys degrade federation functionality

Impact Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. Patches Patched in Synapse 1.138.3, 1.138.4,...

5.3CVSS7AI score0.00434EPSS
SaveExploits0References10
Github Security Blog
Github Security Blog
added 2025/10/08 5:51 p.m.9 views

Synapse's invalid device keys degrade federation functionality

Impact Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. Patches Patched in Synapse 1.138.3, 1.138.4,...

5.3CVSS7AI score0.00434EPSS
SaveExploits0References10Affected Software1
NVD
NVD
added 2025/10/08 3:16 p.m.8 views

CVE-2025-61672

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS0.00434EPSS
SaveExploits0References6
OSV
OSV
added 2025/10/08 3:16 p.m.3 views

DEBIAN-CVE-2025-61672

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS7AI score0.00434EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/08 3:16 p.m.7 views

UBUNTU-CVE-2025-61672

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS5.8AI score0.00434EPSS
SaveExploits0References8
OSV
OSV
added 2025/10/08 2:55 p.m.8 views

CVE-2025-61672 Synapse: Invalid device keys degrade federation functionality

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS6.6AI score0.00434EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/08 2:55 p.m.6 views

EUVD-2025-33305

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS6.4AI score0.00434EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2025/10/08 2:55 p.m.13 views

CVE-2025-61672 Synapse: Invalid device keys degrade federation functionality

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS0.00434EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/10/08 2:55 p.m.3 views

CVE-2025-61672 Synapse: Invalid device keys degrade federation functionality

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS6.5AI score0.00434EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2025/10/08 2:55 p.m.9 views

CVE-2025-61672

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS5.4AI score0.00434EPSS
SaveExploits0
CVE
CVE
added 2025/10/08 2:55 p.m.17 views

CVE-2025-61672

CVE-2025-61672 affects the Synapse Matrix homeserver. The issue is caused by lack of validation for device keys in Synapse before 1.138.3 and in 1.139.0, enabling an attacker registered on the victim homeserver to degrade federation functionality and unpredictably break outbound federation to oth...

5.3CVSS6.5AI score0.00434EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
added 2025/10/08 2:55 p.m.9 views

CVE-2025-61672

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS7AI score0.00434EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/10/08 12:0 a.m.7 views

synapse 安全漏洞

synapse is a matrix master server from Element open source. A security vulnerability exists in synapse versions prior to 1.138.3 and 1.139.0, which stems from a missing device key authentication and could lead to degradation of federation functionality...

5.3CVSS6.4AI score0.00434EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2025/10/07 11:25 p.m.7 views

SUSE CVE-2025-61672

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...

5.3CVSS7AI score0.00434EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-17885

Malware in sbrugna...

6.1CVSS6.3AI score0.01682EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-11948

Malware in sbrugna...

6.1CVSS6.5AI score0.01784EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-19505

Malware in sbrugna...

4.8CVSS4.5AI score0.01416EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-0083

Malware in sbrugna...

9.8CVSS8.6AI score0.00864EPSS
SaveExploits0References8
Rows per page
Query Builder