Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 7:08 a.m.•15 views

CVE-2017-1001002

math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...

9.8CVSS7.5AI score0.02357EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2018/02/02 12:00 a.m.•55 views

Elastic Kibana Arbitrary Code Execution Vulnerability - Linux

Kibana version 6.1.0 had an arbitrary code execution vulnerability in the Math.js package SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS9.8AI score0.02357EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2017/12/18 10:27 p.m.•7 views

@carnesen/mathjs-app (>=0.0.2, <=0.0.5), @ia-cloud/node-red-contrib-ia-cloud-fds-raspberry-pi (>=0.1.0, <=0.1.1) +29 more potentially affected by CVE-2017-1001002 via mathjs (>=3.4.1, <=3.16.5)

mathjs NPM version =3.4.1, =0.0.2, =0.1.0, =1.0.0-beta.1, =1.19.0, =1.13.0, =1.1.8, =0.0.3, =1.0.16, =0.1.0, =1.0.0, =1.0.2 - mdlt 0.0.4 and more Source cves: CVE-2017-1001002 Source advisory: OSV:GHSA-VX5C-87QX-CV6C...

9.8CVSS8.6AI score0.02357EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2017/12/18 10:27 p.m.•1 views

@carnesen/mathjs-app (>=0.0.2, <=0.0.5), @ia-cloud/node-red-contrib-ia-cloud-fds-raspberry-pi (>=0.1.0, <=0.1.1) +29 more potentially affected by CVE-2017-1001002 via mathjs (>=3.4.1, <=3.16.5)

mathjs NPM version =3.4.1, =0.0.2, =0.1.0, =1.0.0-beta.1, =1.19.0, =1.13.0, =1.1.8, =0.0.3, =1.0.16, =0.1.0, =1.0.0, =1.0.2 - mdlt 0.0.4 and more Source cves: CVE-2017-1001002 Source advisory: GHSA-VX5C-87QX-CV6C...

9.8CVSS0.02357EPSS
SaveExploits0
NVD
NVD
•added 2017/11/27 2:29 p.m.•27 views

CVE-2017-1001002

math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution...

9.8CVSS9.6AI score0.02357EPSS
SaveExploits0References2
CVE
CVE
•added 2017/11/27 2:00 p.m.•76 views

CVE-2017-1001002

math.js before 3.17.0 allows arbitrary code execution in the JavaScript engine by creating a typed function with JavaScript code in the name. The vulnerability affects math.js (and has been referenced in OpenVAS/OSV/NVD entries) and can lead to code execution on affected systems. Affected compone...

9.8CVSS9.6AI score0.02357EPSS
SaveExploits0References2Affected Software1
vulnersOsv
vulnersOsv
•added 2017/11/27 2:00 p.m.•2 views

3net.js (>=0.0.1, <=0.2.4), @carnesen/mathjs-app (>=0.0.2, <=0.0.5) +140 more potentially affected by CVE-2017-1001002 via mathjs (>=0.9.1, <=3.16.5)

mathjs NPM version =0.9.1, =0.0.1, =0.0.2, =0.1.0, =1.2.2, =1.2.2, =1.2.2, =0.1.1, =1.0.0, =1.0.1, =1.0.0-beta.1, =0.3.1, =0.1.0, =0.3.0, =1.3.1 and more Source cves: CVE-2017-1001002 Source advisory: MEND:CVE-2017-1001002...

9.8CVSS0.02357EPSS
SaveExploits0
Rows per page
Query Builder