Lucene search
+L

6371 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/16 1:14 p.m.•9 views

Malicious code in react-use-notify (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/16 1:14 p.m.•7 views

Malicious code in react-separator (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/10/16 1:14 p.m.•9 views

MAL-2024-9794 Malicious code in react-separator (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/16 1:14 p.m.•8 views

Malicious code in react-native-playstation (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/10/16 1:14 p.m.•10 views

MAL-2024-9793 Malicious code in react-native-playstation (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/16 1:14 p.m.•24 views

Malicious code in react-native-community (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/10/16 1:14 p.m.•15 views

MAL-2024-9792 Malicious code in react-native-community (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/16 1:14 p.m.•8 views

Malicious code in react-and-rockets (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/10/16 1:14 p.m.•9 views

MAL-2024-9791 Malicious code in react-and-rockets (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/16 12:22 p.m.•8 views

Malicious code in @iceberg-react/test-package (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/10/16 12:22 p.m.•12 views

MAL-2024-9466 Malicious code in @iceberg-react/test-package (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSV
OSV
•added 2024/10/15 6:11 p.m.•21 views

GHSA-QCVH-P9JQ-WP8V Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room

Impact matrix-react-sdk before 3.102.0 allows a malicious homeserver to potentially steal message keys for a room when a user invites another user to that room, via injection of a malicious device controlled by the homeserver. This is possible because matrix-react-sdk before 3.102.0 shared...

8.7CVSS6.2AI score0.00656EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/10/15 6:11 p.m.•35 views

Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room

Impact matrix-react-sdk before 3.102.0 allows a malicious homeserver to potentially steal message keys for a room when a user invites another user to that room, via injection of a malicious device controlled by the homeserver. This is possible because matrix-react-sdk before 3.102.0 shared...

8.7CVSS6.5AI score0.00656EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2024/10/15 4:15 p.m.•24 views

CVE-2024-47824

matrix-react-sdk is react-based software development kit for inserting a Matrix chat/VOIP client into a web page. Starting in version 3.18.0 and before 3.102.0, matrix-react-sdk allows a malicious homeserver to potentially steal message keys for a room when a user invites another user to that roo...

8.7CVSS0.00656EPSS
SaveExploits0References3
Mend
Mend
•added 2024/10/15 3:40 p.m.•4 views

CVE-2024-47824

matrix-react-sdk is react-based software development kit for inserting a Matrix chat/VOIP client into a web page. Starting in version 3.18.0 and before 3.102.0, matrix-react-sdk allows a malicious homeserver to potentially steal message keys for a room when a user invites another user to that roo...

8.7CVSS0.00656EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/10/15 3:40 p.m.•35 views

CVE-2024-47824 Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room

matrix-react-sdk is react-based software development kit for inserting a Matrix chat/VOIP client into a web page. Starting in version 3.18.0 and before 3.102.0, matrix-react-sdk allows a malicious homeserver to potentially steal message keys for a room when a user invites another user to that roo...

8.7CVSS0.00656EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/10/15 3:40 p.m.•21 views

CVE-2024-47824 Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room

matrix-react-sdk is react-based software development kit for inserting a Matrix chat/VOIP client into a web page. Starting in version 3.18.0 and before 3.102.0, matrix-react-sdk allows a malicious homeserver to potentially steal message keys for a room when a user invites another user to that roo...

8.7CVSS7.1AI score0.00656EPSS
SaveExploits0References3
OSV
OSV
•added 2024/10/15 3:40 p.m.•28 views

CVE-2024-47824 Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room

matrix-react-sdk is react-based software development kit for inserting a Matrix chat/VOIP client into a web page. Starting in version 3.18.0 and before 3.102.0, matrix-react-sdk allows a malicious homeserver to potentially steal message keys for a room when a user invites another user to that roo...

8.7CVSS6.9AI score
SaveExploits0References5
CVE
CVE
•added 2024/10/15 3:40 p.m.•80 views

CVE-2024-47824

Summary: CVE-2024-47824 affects matrix-react-sdk. Versions 3.18.0 through

8.7CVSS6.1AI score0.00656EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/15 12:00 a.m.•4 views

CVE-2024-47824: Exposure of Sensitive Information to an Unauthorized Actor

matrix-react-sdk is react-based software development kit for inserting a Matrix chat/VOIP client into a web page. Starting in version 3.18.0 and before 3.102.0, matrix-react-sdk allows a malicious homeserver to potentially steal message keys for a room when a user invites another user to that roo...

8.7CVSS6.1AI score0.00656EPSS
SaveExploits0References1
Rows per page
Query Builder