Lucene search
+L

513 matches found

Wired Threat Level
Wired Threat Level
•added 2022/08/07 11:00 a.m.•22 views

How to Use Lockdown Mode in iOS 16 to Make Your Phone More Secure

Whether you want to turn off link previews or block unwanted FaceTime calls, here's what you need to know...

2.2AI score
SaveExploits0
CNVD
CNVD
•added 2022/06/30 12:00 a.m.•105 views

Matrix Synapse Denial of Service Vulnerability (CNVD-2022-60674)

Matrix Synapse is a Matrix Management Server implementation from the Matrix Foundation in the U.K. A denial of service vulnerability exists in versions of Matrix Synapse prior to 1.61.1, which stems from infinite recursion, where URL previews of certain web pages may exhaust the available stack...

6.5CVSS4.1AI score0.0166EPSS
SaveExploits0References1
OSV
OSV
•added 2022/06/29 9:51 p.m.•52 views

GHSA-22P3-QRH9-CX32 URL previews of unusual or maliciously-crafted pages can crash Synapse media repositories or Synapse monoliths

Impact URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the request causing the problem, but in other cases the Synapse process may crash altogether. It is possible to...

7.1CVSS6.3AI score0.0166EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2022/06/29 9:51 p.m.•49 views

URL previews of unusual or maliciously-crafted pages can crash Synapse media repositories or Synapse monoliths

Impact URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the request causing the problem, but in other cases the Synapse process may crash altogether. It is possible to...

6.5CVSS6.2AI score0.0166EPSS
SaveExploits0References8Affected Software1
Tenable Nessus
Tenable Nessus
•added 2022/06/29 12:00 a.m.•30 views

FreeBSD : py-matrix-synapse -- unbounded recursion in urlpreview (07c0d782-f758-11ec-acaa-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 07c0d782-f758-11ec-acaa-901b0e9408dc advisory. - Synapse is an open source home server implementation for the Matrix chat network. In versions prior t...

6.5CVSS6.4AI score0.0166EPSS
SaveExploits0References3
OSV
OSV
•added 2022/06/28 5:15 p.m.•7 views

DEBIAN-CVE-2022-31052

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS6.6AI score0.0166EPSS
SaveExploits0References1
NVD
NVD
•added 2022/06/28 5:15 p.m.•21 views

CVE-2022-31052

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS0.0166EPSS
SaveExploits0References5
PyPA
PyPA
•added 2022/06/28 5:15 p.m.•10 views

PYSEC-2022-224

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS6.6AI score0.0166EPSS
SaveExploits0References5Affected Software1
Prion
Prion
•added 2022/06/28 5:15 p.m.•26 views

Design/Logic Flaw

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

3.5CVSS6.4AI score0.0166EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2022/06/28 5:15 p.m.•18 views

UBUNTU-CVE-2022-31052

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS6.6AI score0.0166EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/06/28 5:10 p.m.•7 views

CVE-2022-31052 URL previews can crash Synapse media repositories or Synapse monoliths

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS6.5AI score0.0166EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2022/06/28 5:10 p.m.•93 views

CVE-2022-31052

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS6.4AI score0.0166EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/06/28 5:10 p.m.•121 views

CVE-2022-31052

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS6.4AI score0.0166EPSS
SaveExploits0
Cvelist
Cvelist
•added 2022/06/28 5:10 p.m.•47 views

CVE-2022-31052 URL previews can crash Synapse media repositories or Synapse monoliths

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS6.6AI score0.0166EPSS
SaveExploits0References5
CVE
CVE
•added 2022/06/28 5:10 p.m.•499 views

CVE-2022-31052

CVE-2022-31052 affects Synapse (Matrix homeserver). In versions before 1.61.1, URL previews for some web pages can cause unbounded recursion, exhausting stack space and potentially crashing the Synapse process. Remote users can exploit via URL previews that clients auto-request, but the URL previ...

6.5CVSS6.3AI score0.0166EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2022/06/28 5:10 p.m.•26 views

CVE-2022-31052 URL previews can crash Synapse media repositories or Synapse monoliths

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS6.2AI score
SaveExploits0References7
CNNVD
CNNVD
•added 2022/06/28 12:00 a.m.•16 views

Matrix Synapse 安全漏洞

Matrix Synapse is a Matrix Management Server implementation from the Matrix Foundation in the U.K. A denial of service vulnerability exists in versions of Matrix Synapse prior to 1.61.1, which stems from infinite recursion, where URL previews of certain web pages may exhaust the available stack...

6.5CVSS5.7AI score0.0166EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•0 views

PT-2022-20490

Name of the Vulnerable Software and Affected Versions Synapse versions prior to 1.61.1 Description The issue arises from unbounded recursion when generating URL previews of certain web pages, potentially exhausting the available stack space for the Synapse process. This can lead to errors or...

7.1CVSS0.0166EPSS
SaveExploits0References23
RedhatCVE
RedhatCVE
•added 2022/05/20 10:39 p.m.•29 views

CVE-2019-16219

WordPress before 5.2.3 allows XSS in shortcode previews...

6.1CVSS2.7AI score0.01889EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/05/17 12:00 a.m.•8 views

PT-2022-20005

Name of the Vulnerable Software and Affected Versions Jirafeau versions prior to 4.4.0 Description The file preview functionality in Jirafeau, which is enabled by default, could be exploited for cross-site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone...

6.1CVSS6AI score0.00599EPSS
SaveExploits0References11
Rows per page
Query Builder