Lucene search
K

107 matches found

Positive Technologies
Positive Technologies
added 2024/01/24 12:0 a.m.3 views

PT-2024-14318 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted string in the application URL. This can be exploited by sending a specifically designed request to the affected...

9.8CVSS9.4AI score0.03179EPSS
Exploits1References12
CVE
CVE
added 2024/01/24 12:0 a.m.38 views

CVE-2023-51886

CVE-2023-51886 is a confirmed buffer overflow vulnerability in the Mathtex package (versions 1.05 and earlier) affecting the main() function and the use of the \convertpath feature. Multiple connected sources (Red Hat, Ubuntu, OSV, Debian, UBUNTU OSV, Nessus plugin entry) describe that a remote a...

7.5CVSS7.4AI score0.00672EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2024/01/24 12:0 a.m.45 views

CVE-2023-51887

The CVE-2023-51887 issue affects Mathtex versions 1.05 and earlier and is a Command Injection vulnerability. A remote attacker can send a crafted string in the application URL to execute arbitrary code on the affected system. The NVD/Red Hat/UBUNTU OSV entries confirm the same vector and indicate...

9.8CVSS9.8AI score0.03179EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2024/01/24 12:0 a.m.1 views

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and earlier, which stems from a buffer overflow vulnerability in the nomath method. A remote attacker can exploit this vulnerability to cause a denial of service via a crafted...

7.5CVSS7AI score0.00877EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/01/24 12:0 a.m.1 views

PT-2024-14319 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: The issue allows a remote attacker to cause a denial of service via a crafted string in the application URL, specifically exploiting a Buffer Overflow vulnerability in the nomath function...

7.5CVSS7.6AI score0.00877EPSS
Exploits1References14
Positive Technologies
Positive Technologies
added 2024/01/24 12:0 a.m.2 views

PT-2024-14321 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: An infinite loop issue in the software allows remote attackers to consume CPU resources via a crafted string in the application URL. This can lead to potential denial-of-service conditions...

7.5CVSS7.2AI score0.00445EPSS
Exploits1References13
Debian CVE
Debian CVE
added 2024/01/24 12:0 a.m.10 views

CVE-2023-51886

Buffer Overflow vulnerability in the main function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath...

7.5CVSS7.4AI score0.00672EPSS
Exploits1
Debian CVE
Debian CVE
added 2024/01/24 12:0 a.m.11 views

CVE-2023-51890

An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...

7.5CVSS7.4AI score0.00445EPSS
Exploits1
Debian CVE
Debian CVE
added 2024/01/24 12:0 a.m.15 views

CVE-2023-51885

Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...

9.8CVSS9.8AI score0.02948EPSS
Exploits1
CVE
CVE
added 2024/01/24 12:0 a.m.41 views

CVE-2023-51889

CVE-2023-51889 : The vulnerability affects Mathtex versions 1.05 and earlier, caused by a stack overflow in the validate() function. This allows a remote attacker to execute arbitrary code via a crafted string in the application URL. Exploitation details are not provided in the core CVE descripti...

9.8CVSS9.6AI score0.02948EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/24 12:0 a.m.2 views

PT-2024-14320 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted string in the application URL. This is due to a Stack Overflow vulnerability in the validate function. Recommendations:...

9.8CVSS9.4AI score0.02948EPSS
Exploits1References13
Cvelist
Cvelist
added 2024/01/24 12:0 a.m.12 views

CVE-2023-51887

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...

10AI score0.03179EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/01/24 12:0 a.m.0 views

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and earlier, which stems from a buffer overflow vulnerability in the main method. A remote attacker can exploit this vulnerability to cause a denial of service when using...

7.5CVSS7.1AI score0.00672EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/01/24 12:0 a.m.6 views

CVE-2023-51885

Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...

8.2AI score0.02948EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/01/24 12:0 a.m.10 views

CVE-2023-51888

Buffer Overflow vulnerability in the nomath function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL...

6.8AI score0.00877EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/01/24 12:0 a.m.4 views

CVE-2023-51886

Buffer Overflow vulnerability in the main function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath...

7.2AI score0.00672EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/01/24 12:0 a.m.12 views

CVE-2023-51889

Stack Overflow vulnerability in the validate function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL...

7.8AI score0.02948EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/01/24 12:0 a.m.1 views

CVE-2023-51890

An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...

7.2AI score0.00445EPSS
Exploits1References1
CVE
CVE
added 2024/01/24 12:0 a.m.35 views

CVE-2023-51888

CVE-2023-51888 describes a buffer overflow in the nomath() function of Mathtex

7.5CVSS7.3AI score0.00877EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2024/01/24 12:0 a.m.11 views

CVE-2023-51888

Buffer Overflow vulnerability in the nomath function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL...

7.5CVSS7.3AI score0.00877EPSS
Exploits1
Rows per page
Query Builder