Media
CVE-2025-61672
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 45
Restablecer filtros
Alta
CVE-2025-30355
Synapse vulnerable to federation denial of service via malformed events
Alta
CVE-2024-52815
Synapse allows a a malformed invite to break the invitee's `/sync`
Media
CVE-2024-53867
Synapse Matrix has a partial room state leak via Sliding Sync
Alta
CVE-2024-53863
Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
Alta
CVE-2024-52805
Synapse allows unsupported content types to lead to memory exhaustion
Alta
CVE-2018-10657
Matrix Synapse DoS
Alta
CVE-2018-12423
Matrix Synapse Authorization Error
Alta
CVE-2018-16515
Matrix Synapse Improper Signature Validation
Alta
CVE-2018-12291
Matrix Synapse Security Filtering Flaw
Media
CVE-2022-41952
Uncontrolled Resource Consumption in Matrix Synapse
Media
CVE-2026-45076
Synapse pagination Denial of Service
Alta
CVE-2026-45078
Synapse CPU starvation (Denial of Service)
Media
CVE-2024-37303
Synapse's unauthenticated writes to the media repository allow planting of problematic content
Alta
CVE-2024-37302
Synapse denial of service through media disk space consumption
Media
CVE-2024-31208
Synapse V2 state resolution weakness allows Denial of Service (DoS)
Media
CVE-2023-43796
Synapse vulnerable to leak of remote user device information
Media
CVE-2023-45129
matrix-synapse vulnerable to denial of service due to malicious server ACL events
Media
CVE-2023-42453
matrix-synapse vulnerable to improper validation of receipts allows forged read receipts
Baja
CVE-2023-41335
matrix-synapse vulnerable to temporary storage of plaintext passwords during password changes
Media
CVE-2023-32683
Synapse has URL deny list bypass via oEmbed and image URLs when generating previews
Media
CVE-2023-32682
Synapse has improper checks for deactivated users during login
Media
CVE-2023-32323
Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites
Alta
CVE-2022-39374
Synapse Denial of service due to incorrect application of event authorization rules during state resolution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.