SUSE CVE-2009-1171

The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an input command in a "$$" sequence, which causes LaTeX to include the contents of the file...

SUSE CVE-2012-2093

src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the gettmpfilename function...

Moodle Improper Encoding or Escaping of Output

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account...

GHSA-M37G-MWCG-7J7V Moodle Improper Encoding or Escaping of Output

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account...

CVE-2021-40694

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account...

CVE-2021-40694

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account...

CVE-2021-40694

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account...

Design/Logic Flaw

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account...

UBUNTU-CVE-2021-40694

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account...

CVE-2021-40694

Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account...

XSS via Mathematical Typesetting

🔒️ Requirements Feature: Extras Mathematical Typesetting enabled. User interaction: Access vulnerable page || diagram and wheel click on a link. 📝 Description The Mathematical Typesetting feature allows to use inline content such as AsciiMath or LaTeX. Using it allows you to create a tag via \href...

cv-letter (1.0.0), docogen (>=0.0.3, <=0.1.6) +4 more potentially affected by CVE-2020-28433 via node-latex-pdf (0.0.2)

node-latex-pdf NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-latex-pdf and may be impacted: - cv-letter 1.0.0 - docogen =0.0.3, =0.0.1, =0.0.7 - resume-builder-iitrpr 1.0.0 Source cves: CVE-2020-28433 Source advisory:...

GHSA-32FW-9WQ8-9X9C node-latex-pdf is susceptible to command injection

A command injection vulnerability affects all versions of the package node-latex-pdf...

node-latex-pdf is susceptible to command injection

A command injection vulnerability affects all versions of the package node-latex-pdf...

CVE-2020-28433

This affects all versions of package node-latex-pdf...

Code injection

This affects all versions of package node-latex-pdf...

CVE-2020-28433 Command Injection

This affects all versions of package node-latex-pdf...

CVE-2020-28433

CVE-2020-28433 affects all versions of the npm package node-latex-pdf. Multiple sources describe a command injection vulnerability arising from insecure handling in the package (notably in the compilation/execution flow of the internal function, enabling arbitrary commands to be injected). The cr...

npm package node-latex-pdf 命令注入漏洞

The npm package node-latex-pdf is a package for converting latex files to pdf format from the US company npm. A command injection vulnerability exists in all versions of node-latex-pdf, which stems from the presence of command injection...

PT-2022-8889 · Unknown · Node-Latex-Pdf

Name of the Vulnerable Software and Affected Versions: node-latex-pdf versions all Description: A command injection issue affects the package. This allows for potential exploitation. The estimated number of potentially affected devices is not provided. Recommendations: For all versions, consider...