Lucene search
+L

6 matches found

OSV
OSV
added 2026/07/07 2:34 p.m.5 views

PYSEC-2026-1118 Anki Latex Incomplete Blocklist Vulnerability

An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by default in many Latex distributions, has been overlooked. A specially crafted flashcard can lead to an arbitrary file read. ...

6CVSS6AI score0.11732EPSS
SaveExploits1References9
OSV
OSV
added 2026/07/07 2:34 p.m.6 views

PYSEC-2026-1116 Ankitects Anki arbitrary script execution vulnerability

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability...

9.6CVSS6.4AI score0.15067EPSS
SaveExploits1References8
OSV
OSV
added 2024/07/22 3:15 p.m.3 views

DEBIAN-CVE-2024-26020

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability...

8.8CVSS6.2AI score0.15067EPSS
SaveExploits1References1
OSV
OSV
added 2024/07/22 3:15 p.m.47 views

UBUNTU-CVE-2024-29073

An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by default in many Latex distributions, has been overlooked. A specially crafted flashcard can lead to an arbitrary file read. ...

6.5CVSS5.9AI score0.11732EPSS
SaveExploits1References3
OSV
OSV
added 2024/07/22 3:15 p.m.43 views

UBUNTU-CVE-2024-26020

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability...

9.6CVSS6.2AI score0.15067EPSS
SaveExploits1References3
CVE
CVE
added 2024/07/22 2:20 p.m.87 views

CVE-2024-26020

CVE-2024-26020 : The vulnerability affects Ankitects Anki 24.04, where the MPV functionality in flashcards processes user-supplied content and can trigger arbitrary code execution via a crafted flashcard. Multiple connected sources corroborate exploitation potential and assign high/critical impac...

9.6CVSS9.4AI score0.15067EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder