CLEANSTART-2024-NV58280 logic error in the room key sharing functionality of Element Android before 1

Security vulnerability affects the element-web package. A logic error in the room key sharing functionality of Element Android before 1...

CLEANSTART-2024-FT51773 logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12

Security vulnerability affects the element-web package. A logic error in the room key sharing functionality of matrix-js-sdk aka Matrix Javascript SDK before 12...

CLEANSTART-2024-KG85356 matrix-react-sdk is a Matrix chat protocol SDK for React Javascript

Security vulnerability affects the element-web package. matrix-react-sdk is a Matrix chat protocol SDK for React Javascript...

CLEANSTART-2024-IV81629 matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript

Security vulnerability affects the element-web package. matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript...

CLEANSTART-2024-EM09581 Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript

Security vulnerability affects the element-web package. Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript...

CLEANSTART-2024-VR88487 Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript

Security vulnerability affects the element-web package. Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript...

CLEANSTART-2024-YV48715 Matrix JavaScript SDK is the Matrix Client-Server software development kit (SDK) for JavaScript

Security vulnerability affects the element-web package. Matrix JavaScript SDK is the Matrix Client-Server software development kit SDK for JavaScript...

CLEANSTART-2024-QT51844 Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript

Security vulnerability affects the element-web package. Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript...

CLEANSTART-2024-KH83435 matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript

Security vulnerability affects the element-web package. matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript...

CLEANSTART-2024-LQ80354 matrix-react-sdk is a Matrix chat protocol SDK for React Javascript

Security vulnerability affects the element-web package. matrix-react-sdk is a Matrix chat protocol SDK for React Javascript...

CLEANSTART-2024-ZD82819 matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page

Security vulnerability affects the element-web package. matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page...

CLEANSTART-2024-RA01246 XSS can occur in GNOME Web (aka Epiphany) before 40

Security vulnerability affects the epiphany package. XSS can occur in GNOME Web aka Epiphany before 40...

CVE-2023-23752-EXPLOIT

CVE-2023-23752 - Joomla: Verificación de Acceso Incorrecta Se ha identificado un problema en las versiones 4.0.0 a 4.2.7 de Joomla. Esta vulnerabilidad está relacionada con una verificación de acceso incorrecta dentro de la aplicación, lo que permite el acceso no autorizado a endpoints críticos d...

Improper Neutralization Of Input During Web Page Generation

org.apache.wicket, wicket-core is vulnerable to improper neutralization of input during web page generation. The vulnerability is due to the resolver rendering attacker-influenced label values without escaping, which allows an attacker to inject malicious markup or script content into a web page...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, open-webui, k8s-sidecar, jupyter-base-notebook, ggshield, kubeflow-katib, dask-kubernetes, kserve, kubeflow-pipelines-visualization-server, az, kubeflow-pipelines, datadog-agent, kubeflow-jupyter-web-app...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, open-webui, k8s-sidecar, jupyter-base-notebook, ggshield, kubeflow-katib, dask-kubernetes, kserve, kubeflow-pipelines-visualization-server, az, kubeflow-pipelines, datadog-agent, kubeflow-jupyter-web-app...

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

EUVD-2026-90453

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

CVE-2026-14157

A Use of an Externally Controlled Format String vulnerability exists in ASUS Router modules . A remote authenticated user can execute arbitrary commands by uploading a crafted file through the web management interface . No specific affected versions, root cause details, or remediation steps are p...