Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:29 a.m.6 views

CVE-2024-45312

Overleaf is a web-based collaborative LaTeX editor. Overleaf Community Edition and Server Pro prior to version 5.0.7 or 4.2.7 for the 4.x series contain a vulnerability that allows an arbitrary language parameter in client spelling requests to be passed to the aspell executable running on the...

5.3CVSS6.9AI score0.01041EPSS
Exploits0
NVD
NVD
added 2024/09/02 6:15 p.m.14 views

CVE-2024-45313

Overleaf is a web-based collaborative LaTeX editor. When installing Server Pro using the Overleaf Toolkit from before 2024-07-17 or legacy docker-compose.yml from before 2024-08-28, the configuration for LaTeX compiles was insecure by default, requiring the administrator to enable the security...

5.4CVSS0.00327EPSS
Exploits0References4
CVE
CVE
added 2024/09/02 4:54 p.m.57 views

CVE-2024-45313

Summary: CVE-2024-45313 affects Overleaf Server Pro when installed via the Overleaf Toolkit or legacy docker-compose deployments prior to mid-2024. By default, LaTeX compiles could access the sharelatex container resources (filesystem, network, environment variables) if security features were not...

5.4CVSS5.5AI score0.00327EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2024/09/02 4:54 p.m.19 views

CVE-2024-45313 Insecure default setting for Server Pro installed via Overleaf toolkit

Overleaf is a web-based collaborative LaTeX editor. When installing Server Pro using the Overleaf Toolkit from before 2024-07-17 or legacy docker-compose.yml from before 2024-08-28, the configuration for LaTeX compiles was insecure by default, requiring the administrator to enable the security...

5.4CVSS0.00327EPSS
Exploits0References4
OSV
OSV
added 2024/09/02 4:50 p.m.10 views

CVE-2024-45312 Arbitrary language parameter can passed to `aspell` executable via spelling requests in overleaf

Overleaf is a web-based collaborative LaTeX editor. Overleaf Community Edition and Server Pro prior to version 5.0.7 or 4.2.7 for the 4.x series contain a vulnerability that allows an arbitrary language parameter in client spelling requests to be passed to the aspell executable running on the...

5.3CVSS6.9AI score0.01041EPSS
Exploits0References5
Fedora
Fedora
added 2016/03/09 8:21 p.m.23 views

[SECURITY] Fedora 23 Update: gummi-0.6.6-1.fc23

Gummi is a LaTeX editor written in the C programming language using the GTK+ interface toolkit. It was designed with simplicity and the novice user in mind, but also offers features that speak to the more advanced user...

3.3CVSS2.7AI score0.00048EPSS
Exploits0
Fedora
Fedora
added 2016/03/09 8:17 p.m.27 views

[SECURITY] Fedora 22 Update: gummi-0.6.6-1.fc22

Gummi is a LaTeX editor written in the C programming language using the GTK+ interface toolkit. It was designed with simplicity and the novice user in mind, but also offers features that speak to the more advanced user...

3.3CVSS2.7AI score0.00048EPSS
Exploits0
CNVD
CNVD
added 2015/10/29 12:0 a.m.1 views

Gummi Local Competitive Conditions Vulnerability

Gummi is a Dutch software developer Alexander van der Meij developed a Linux-based platform and the use of C and GTK + technology development of open-source Latex editor , it provides real-time preview , syntax highlighting , export to PDF, error correction / spell checking and preset templates a...

3.3CVSS6.6AI score0.00048EPSS
Exploits0References1
Rows per page
Query Builder