Lucene search
+L

27 matches found

Positive Technologies
Positive Technologies
•added 2023/03/28 12:00 a.m.•4 views

PT-2023-2100

Name of the Vulnerable Software and Affected Versions matrix-js-sdk versions prior to 24.0.0 Description The issue is related to events sent with special strings in key places, which can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer'...

8.5CVSS0.01185EPSS
SaveExploits0References110
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/28 12:00 a.m.•2 views

CVE-2023-28427: Improperly Controlled Modification of Object Prototype Attributes

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

8.2CVSS5.7AI score0.01185EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2022/09/29 2:36 p.m.•49 views

Improper beacon events in matrix-js-sdk can result in availability issues

Impact Improperly formed beacon events from MSC3488 can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data...

5.3CVSS6.8AI score0.0134EPSS
SaveExploits0References7Affected Software1
CNNVD
CNNVD
•added 2022/09/28 12:00 a.m.•11 views

Matrix 输入验证错误漏洞

Matrix is an ambitious new ecosystem for open federated instant messaging and VoIP. Matrix Javascript SDK 17.1.0-rc.1 and later has an input validation error vulnerability that stems from the fact that its incorrectly formatted beacon event from MSC3488 could corrupt or prevent the matrix-js-sdk...

5.3CVSS7AI score0.0134EPSS
SaveExploits0References11
OSV
OSV
•added 2022/08/24 4:15 p.m.•10 views

CVE-2022-34836

Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who successfully exploit the vulnerability could access the Zenon runtime activities such as the start an...

8.2CVSS7.3AI score0.00621EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/29 2:15 a.m.•33 views

Design/Logic Flaw

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl all published versions enables an attacker authenticated on the local system to inject data, affecting the online view...

2.1CVSS4.6AI score0.0034EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/04/29 12:00 a.m.•23 views

ABB Ability System 800xA Privilege License and Access Control Issues Vulnerability

ABB Ability System 800xA is a distributed control system from ABB Switzerland for the industrial control industry. A privilege permission and access control issue vulnerability exists in ABB System 800xA all versions, which can be exploited by a local attacker to inject data and affect the view o...

5.3CVSS6.6AI score0.0034EPSS
SaveExploits0References1
Rows per page
Query Builder