CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6791 matches found

NVD•added 2021/05/17 8:15 p.m.•70 views

CVE-2021-32622

Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, when uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file. This can only occur after several user interactions to open the previ...

7.8CVSS0.00373EPSS

SaveExploits0References2

attackerkb•added 2021/05/17 8:15 p.m.•11 views

CVE-2021-32622

7.8CVSS7AI score0.00373EPSS

SaveExploits0References3Affected Software1

Prion•added 2021/05/17 8:15 p.m.•34 views

Design/Logic Flaw

4.4CVSS7.5AI score0.00373EPSS

SaveExploits0References2Affected Software1

CVE•added 2021/05/17 7:35 p.m.•97 views

CVE-2021-32622

CVE-2021-32622 affects the Matrix-React-SDK (Matrix-React-SDK) prior to version 3.21.0. The vulnerability arises during file uploads: when a user previews an uploaded file, scripts embedded in the file can execute, but only for the local user and only after several user interactions to open the p...

7.8CVSS5.6AI score0.00373EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2021/05/17 7:35 p.m.•77 views

CVE-2021-32622 File upload local preview can run embedded scripts after user interaction

4.2CVSS7.7AI score0.00373EPSS

SaveExploits0References2

Mend•added 2021/05/17 7:35 p.m.•7 views

CVE-2021-32622

7.8CVSS0.00373EPSS

SaveExploits0References4

vulnersOsv•added 2021/05/17 7:35 p.m.•2 views

matrix-react-skin (>=0.0.1, <=0.0.2), vector-web (0.3.0) potentially affected by CVE-2021-32622 via matrix-react-sdk (>=0.0.1, <=0.2.0)

matrix-react-sdk NPM version =0.0.1, =0.0.1, =0.0.2 - vector-web 0.3.0 Source cves: CVE-2021-32622 Source advisory: MEND:CVE-2021-32622...

7.8CVSS0.00373EPSS

SaveExploits0

Positive Technologies•added 2021/05/17 12:00 a.m.•3 views

PT-2021-19814

Name of the Vulnerable Software and Affected Versions Matrix-React-SDK versions prior to 3.21.0 Description The issue arises when uploading a file, as the local file preview can lead to the execution of scripts embedded in the uploaded file. This occurs after several user interactions to open the...

7.8CVSS0.00373EPSS

SaveExploits0References8

Rapid7 Vulnerability Database (full)•added 2021/05/17 12:00 a.m.•10 views

CVE-2021-32622: Improper Neutralization of Special Elements in Output Used by a Downstream Component

7.8CVSS5.9AI score0.00373EPSS

SaveExploits0References3

CNNVD•added 2021/05/17 12:00 a.m.•45 views

Travis Ralston matrix-react-sdk code issues and vulnerabilities

Travis Ralston matrix-react-sdk is an open source application by Travis Ralston. Used to insert the Matrix chat/voice client into a web page. A code issue vulnerability exists in Matrix-React-SDK that arises from an improperly designed or implemented code development process for a web system or...

7.8CVSS7.4AI score0.00373EPSS

SaveExploits0References4

vulnersOsv•added 2021/05/07 4:20 p.m.•1 views

brew-js (>=0.1.0-beta, <=0.1.8), buildr (>=0.2.0, <=0.8.7) +9 more potentially affected by CVE-2020-7604 via pulverizr (0.7.0)

pulverizr NPM version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pulverizr and may be impacted: - brew-js =0.1.0-beta, =0.2.0, =0.1.0, =0.0.1, =0.0.2, =1.0.0, =0.1.0, =0.0.11, =0.0.12 Source cves: CVE-2020-7604 Source advisory:...

9.8CVSS0.02575EPSS

SaveExploits1

vulnersOsv•added 2021/05/06 4:10 p.m.•13 views

@codious/core (>=1.0.6, <=1.2.4), @koj/strapi (>=1.4.1, <=1.4.3) +6 more potentially affected by CVE-2021-26539 via sanitize-html (>=2.1.0, <=2.3.0)

sanitize-html NPM version =2.1.0, =1.0.6, =1.4.1, =3.37.0, =2.1.56, =2.0.58, =0.12.0, =3.2.5, =3.5.2 Source cves: CVE-2021-26539 Source advisory: OSV:GHSA-RJQQ-98F6-6J3R...

5.3CVSS5.6AI score0.01953EPSS

SaveExploits1

nodejs•added 2021/05/06 3:53 p.m.•61 views

Cross-Site Scripting

Overview react-draft-wysiwyg aka React Draft Wysiwyg before 1.14.6 allows a javascript: URi in a Link Target of the link decorator in decorators/Link/index.js when a draft is shared across users, leading to XSS. Recommendation Upgrade to version 1.14.6 or later References - CVE - GitHub Advisory...

3.5CVSS3.5AI score0.00792EPSS

SaveExploits1Affected Software1

Github Security Blog•added 2021/05/06 3:52 p.m.•66 views

Cross-site Scripting in React Draft Wysiwyg

react-draft-wysiwyg aka React Draft Wysiwyg before 1.14.6 allows a javascript: URi in a Link Target of the link decorator in decorators/Link/index.js when a draft is shared across users, leading to XSS...

5.4CVSS5.5AI score0.00792EPSS

SaveExploits1References5Affected Software1

vulnersOsv•added 2021/05/06 3:52 p.m.•7 views

@1studio/ui (>=1.0.7, <=2.83.0), @cloudacademy/integrations (>=0.0.2, <=0.0.15) +51 more potentially affected by CVE-2021-31712 via react-draft-wysiwyg (>=1.10.0, <=1.14.5)

react-draft-wysiwyg NPM version =1.10.0, =1.0.7, =0.0.2, =2.1.15, =0.1.0, =1.0.0, =1.0.0-rc.1.0.0, =0.1.1, =0.1.5, =0.8.6, =0.0.15, =2.1.19, =1.0.0, =0.10.5, =0.0.8, =0.2.5 and more Source cves: CVE-2021-31712 Source advisory: OSV:GHSA-QCG2-H349-VWM3...

5.4CVSS5.6AI score0.00792EPSS

SaveExploits1

vulnersOsv•added 2021/05/06 3:52 p.m.•2 views

@1studio/ui (>=1.0.7, <=2.83.0), @cloudacademy/integrations (>=0.0.2, <=0.0.15) +51 more potentially affected by CVE-2021-31712 via react-draft-wysiwyg (>=1.10.0, <=1.14.5)

5.4CVSS0.00792EPSS

SaveExploits1

osv_ghsa•added 2021/05/06 3:52 p.m.•63 views

GHSA-QCG2-H349-VWM3 Cross-site Scripting in React Draft Wysiwyg

5.4CVSS5.9AI score0.00792EPSS

SaveExploits1References4

NVD•added 2021/04/24 9:15 p.m.•40 views

CVE-2021-31712

5.4CVSS0.00792EPSS

SaveExploits1References3

osv_cve•added 2021/04/24 9:15 p.m.•24 views

CVE-2021-31712

5.4CVSS6.7AI score

SaveExploits0References3

attackerkb•added 2021/04/24 9:15 p.m.•9 views

CVE-2021-31712

5.4CVSS6.2AI score0.00792EPSS

SaveExploits1References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by