Lucene search
+L

631 matches found

OSV
OSV
added 2026/05/28 5:16 p.m.16 views

PYSEC-2026-194

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

2.7CVSS5.4AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/28 5:16 p.m.11 views

DEBIAN-CVE-2026-45076

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

2.7CVSS5.8AI score0.00369EPSS
SaveExploits0References1
PyPA
PyPA
added 2026/05/28 5:16 p.m.14 views

PYSEC-0000-CVE-2026-45076

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

5.1CVSS5.4AI score0.00369EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/05/28 5:16 p.m.22 views

PYSEC-2026-194

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

5.1CVSS5.4AI score0.00369EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/05/28 5:16 p.m.30 views

CVE-2026-45076

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

5.1CVSS0.00369EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/05/28 5:16 p.m.12 views

CVE-2026-45076

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

5.1CVSS6.1AI score0.00369EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/28 5:16 p.m.15 views

UBUNTU-CVE-2026-45076

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

5.1CVSS5.8AI score0.00369EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/05/28 3:50 p.m.44 views

CVE-2026-45076 Synapse pagination denial of service

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

5.1CVSS0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/28 3:50 p.m.109 views

CVE-2026-45076

Synapse (open source Matrix homeserver) is affected by CVE-2026-45076. In federated rooms, malicious homeservers can craft room events to prevent full history from being provided to paginating clients, causing clients to fail to display room history. The issue is fixed in Synapse 1.152.1 or later...

5.1CVSS5.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2026/05/28 3:50 p.m.22 views

CVE-2026-45076

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

5.1CVSS5.8AI score0.00369EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/05/28 3:50 p.m.11 views

CVE-2026-45076

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

5.1CVSS5.8AI score0.00369EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/05/28 3:50 p.m.45 views

EUVD-2026-32934

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

5.1CVSS5.8AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/26 12:03 a.m.30 views

MAL-2026-4777 Malicious code in xct-x-ayoub (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33575d7ebb1fa670ce8a2f633471492b04319daffe0f1e10dd35841cf2709af On import XcTxAyOuB, the package's top-level init.py unconditionally starts a Flask HTTP server bound to 0.0.0.0:5000 configurable via PORT exposing...

5.8AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/05/15 7:57 a.m.21 views

CVE-2026-30906

Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access...

7.8CVSS5.8AI score0.00118EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/15 12:00 a.m.13 views

Zoom Rooms < 7.0.0 Untrusted Search Path (ZSB-26008)

The version of Zoom Rooms installed on the remote host is prior to 7.0.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26008 advisory. - Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an...

7.8CVSS5.8AI score0.00118EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/14 4:18 p.m.18 views

GHSA-6QF2-7X63-MM6V Synapse pagination Denial of Service

Impact In federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. Patches Update to Synapse 1.152.1 or later. Workarounds There are no known workaround...

6.9CVSS5.9AI score0.00369EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/05/14 4:18 p.m.32 views

Improper Check for Unusual or Exceptional Conditions

Overview matrix-synapse is an ecosystem for open federated Instant Messaging and VoIP. Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions in the pagination process for federated rooms. An attacker can cause clients to fail to display room...

6.9CVSS5.8AI score0.00369EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/05/14 4:18 p.m.24 views

Synapse pagination Denial of Service

Impact In federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. Patches Update to Synapse 1.152.1 or later. Workarounds There are no known workaround...

5.1CVSS5.9AI score0.00369EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/14 12:00 a.m.32 views

PT-2026-41158

Name of the Vulnerable Software and Affected Versions Synapse versions prior to 1.152.1 Description In federated rooms, malicious homeservers can craft room events that prevent the server from providing full history to paginating clients. This can result in clients failing to display the room...

6.9CVSS5.8AI score0.00369EPSS
SaveExploits0References10
EUVD
EUVD
added 2026/05/13 9:32 p.m.19 views

EUVD-2026-30112

Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access...

7.8CVSS5.8AI score0.00118EPSS
SaveExploits0References2
Rows per page
Query Builder