Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 4

Количество 4

ubuntu логотип

CVE-2022-39264

около 4 лет назад

nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets, which could lead to man-in-the-middle attacks. Users can upgrade to version 0.10.2 to protect against this issue. As a workaround, one may apply the patch manually, avoid doing verifications of one's own devices, and/or avoid pressing the request button in the settings menu.

CVSS3: 5.9
EPSS: Низкий
nvd логотип

CVE-2022-39264

около 4 лет назад

nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets, which could lead to man-in-the-middle attacks. Users can upgrade to version 0.10.2 to protect against this issue. As a workaround, one may apply the patch manually, avoid doing verifications of one's own devices, and/or avoid pressing the request button in the settings menu.

CVSS3: 5.9
EPSS: Низкий
debian логотип

CVE-2022-39264

около 4 лет назад

nheko is a desktop client for the Matrix communication application. Al ...

CVSS3: 5.9
EPSS: Низкий
altlinux логотип

ALT-PU-2024-1984

почти 3 года назад

ALT-PU-2024-1984: package `nheko` update to version 0.11.3-alt1

CVSS3: 5.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-39264

nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets, which could lead to man-in-the-middle attacks. Users can upgrade to version 0.10.2 to protect against this issue. As a workaround, one may apply the patch manually, avoid doing verifications of one's own devices, and/or avoid pressing the request button in the settings menu.

CVSS3: 5.9
1%
Низкий
около 4 лет назад
nvd логотип
CVE-2022-39264

nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets, which could lead to man-in-the-middle attacks. Users can upgrade to version 0.10.2 to protect against this issue. As a workaround, one may apply the patch manually, avoid doing verifications of one's own devices, and/or avoid pressing the request button in the settings menu.

CVSS3: 5.9
1%
Низкий
около 4 лет назад
debian логотип
CVE-2022-39264

nheko is a desktop client for the Matrix communication application. Al ...

CVSS3: 5.9
1%
Низкий
около 4 лет назад
altlinux логотип
ALT-PU-2024-1984

ALT-PU-2024-1984: package `nheko` update to version 0.11.3-alt1

CVSS3: 5.9
1%
Низкий
почти 3 года назад

Уязвимостей на страницу