Ankitects Anki Flask Invalid Path Reflected Cross-Site Scripting (XSS) vulnerability

Talos Vulnerability Report TALOS-2024-1995 Ankitects Anki Flask Invalid Path Reflected Cross-Site Scripting XSS vulnerability July 22, 2024 CVE Number CVE-2024-32484 SUMMARY An reflected XSS vulnerability exists in the handling of invalid paths in the Flask server in Ankitects Anki 24.04. A...

PT-2024-21280

Name of the Vulnerable Software and Affected Versions Ankitects Anki version 24.04 Description A specially crafted flashcard can lead to arbitrary code execution due to an arbitrary script execution issue in the MPV functionality. An attacker can send a malicious flashcard to trigger this issue...

PT-2024-24608 · Ankitects +1 · Anki +1

Name of the Vulnerable Software and Affected Versions: Ankitects Anki version 24.04 Description: A reflected XSS issue exists in the handling of invalid paths in the Flask server. This can be triggered by a specially crafted flashcard, leading to JavaScript code execution and potentially resultin...

Ankitects Anki Latex Incomplete Blocklist Vulnerability

Talos Vulnerability Report TALOS-2024-1992 Ankitects Anki Latex Incomplete Blocklist Vulnerability July 22, 2024 CVE Number CVE-2024-29073 SUMMARY An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package,...

PT-2024-22699

Name of the Vulnerable Software and Affected Versions Ankitects Anki version 24.04 Description A vulnerability exists in the handling of Latex, where the verbatim package has been overlooked during sanitization to prevent unsafe commands. This can lead to an arbitrary file read when a specially...

Ankitects Anki LaTeX Blocklist Bypass vulnerability

Talos Vulnerability Report TALOS-2024-1994 Ankitects Anki LaTeX Blocklist Bypass vulnerability July 22, 2024 CVE Number CVE-2024-32152 SUMMARY A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitra...

PT-2024-24448

Name of the Vulnerable Software and Affected Versions Ankitects Anki version 24.04 Description A blocklist bypass issue exists in the LaTeX functionality, allowing a specially crafted malicious flashcard to create an arbitrary file at a fixed path. An attacker can trigger this issue by sharing a...

Ankitects Anki MPV script injection vulnerability

Talos Vulnerability Report TALOS-2024-1993 Ankitects Anki MPV script injection vulnerability July 22, 2024 CVE Number CVE-2024-26020 SUMMARY An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary...

Mageia: Security Advisory (MGASA-2018-0216)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 28 : anki (2018-50039f6b61)

Update to new upstream release 2.0.50. - fix a security issue in .apkg imports - fix a problem with plugin download - use python send2trash module from system - use correct shebang for python2 - upstream changelog: https://apps.ankiweb.net/docs/changes.html Note that Tenable Network Security has...

Updated anki package fixes security vulnerability

Anki 2.0.47 fixes a security issue in .apkg imports...

MGASA-2018-0216 Updated anki package fixes security vulnerability

Anki 2.0.47 fixes a security issue in .apkg imports...

Fedora 27 : anki (2018-70fac3f07e)

Update to new upstream release 2.0.50. - fix a security issue in .apkg imports - fix a problem with plugin download - use python send2trash module from system - use correct shebang for python2 - upstream changelog: https://apps.ankiweb.net/docs/changes.html Note that Tenable Network Security has...

Fedora 26 : anki (2018-58b0c6a60e)

Update to new upstream release 2.0.50. - fix a security issue in .apkg imports - fix a problem with plugin download - use correct shebang for python2 - upstream changelog: https://apps.ankiweb.net/docs/changes.html Note that Tenable Network Security has extracted the preceding description block...

Fedora Update for anki FEDORA-2018-58b0c6a60e

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for anki FEDORA-2018-70fac3f07e

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 26 Update: anki-2.0.50-1.fc26

Anki is a program designed to help you remember facts such as words and phrases in a foreign language as easily, quickly and efficiently as possible. Anki is based on a theory called spaced repetition...

[SECURITY] Fedora 27 Update: anki-2.0.50-1.fc27

Anki is a program designed to help you remember facts such as words and phrases in a foreign language as easily, quickly and efficiently as possible. Anki is based on a theory called spaced repetition...

[SECURITY] Fedora 28 Update: anki-2.0.50-1.fc28

Anki is a program designed to help you remember facts such as words and phrases in a foreign language as easily, quickly and efficiently as possible. Anki is based on a theory called spaced repetition...