PYSEC-2021-865

In Mozilla Bleach before 3.3.0, a mutation XSS affects users calling bleach.clean with math or svg; p or br; and style, title, noscript, script, textarea, noframes, iframe, or xmp tags with stripcomments=False...

CVE-2018-20803 Infinite loop in aggregation expression

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10...

CVE-2018-20803

Removed by vendor...

Ronald Graham and the Magic of Math

Late Monday night, I received an email sharing the sad news that Ronald Graham had died that evening at the age of 84. For those who never had the pleasure of knowing Ron, he was a brilliant mathematician with a great sense of humor, a circus-level juggler and magician, a mentor of countless...

A Message to the Young Innovators of Tomorrow

At a time when a global pandemic has forced students to go online to learn, the International Science and Engineering Fair is using the internet to bring together some of the most brilliant and innovative students from all over the world. Collectively, they represent the kind of talent that will ...

How to transform your revolutionary idea into a reality: $100K Nokia Bell Labs Prize

Revolutionary ideas in science, technology, engineering, and mathematics don't occur every day. But when those "eureka" moments happen, we need to provide a forum to explore those ideas, judge them on their merits, and distinguish the extraordinary from the merely good. Once a year, Nokia Bell La...

CVE-2019-19329

In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arbitrary JavaScript execution can occur, aka XSS. This was addressed by introducing MathJax as a new mathematics rendering engine. NOTE: this GUI code is no...

CVE-2018-1517

A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681...

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, arises due to an operation that goes beyond the buffer in memory. Exploiting this...

web.tricolib.brynmawr.edu XSS vulnerability

Open Bug Bounty ID: OBB-378373 Description| Value ---|--- Affected Website:| web.tricolib.brynmawr.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

GIMPS: Root privilege escalation

Background GIMPS, the Great Internet Mersenne Prime Search, is a software capable of find Mersenne Primes, which are used in cryptography. GIMPS is also used for hardware testing. Description It was discovered that Gentoo’s default GIMPS installation suffered from a privilege escalation...

Hardcoded credentials

The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search GIMPS allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed...

CVE-2017-14484

Summary: CVE-2017-14484 affects Gentoo’s sci-mathematics/gimps prior to 28.10-r1, enabling a local user to escalate privileges by creating a hard link under /var/lib/gimps due to an unsafe chown -R in the init/checkconfig path. The vulnerability is documented in multiple sources (NVD description ...

a2zcolleges.com XSS vulnerability

Vulnerable URL: http://www.a2zcolleges.com/advancedresults.asp?Mathematics=1"...

Mathematics - Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Mathematics published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 22 Update: wildmagic5-5.13-12.fc22

A library of source code for computing in the fields of graphics, mathematics, physics, and image analysis. Web page documentation: http://www.geometrictools.com/Documentation/Documentation.html...

[SECURITY] Fedora 21 Update: wildmagic5-5.13-12.fc21

A library of source code for computing in the fields of graphics, mathematics, physics, and image analysis. Web page documentation: http://www.geometrictools.com/Documentation/Documentation.html...

[SECURITY] Fedora 23 Update: wildmagic5-5.13-12.fc23

A library of source code for computing in the fields of graphics, mathematics, physics, and image analysis. Web page documentation: http://www.geometrictools.com/Documentation/Documentation.html...

[SECURITY] Fedora 20 Update: sagemath-6.1.1-6.fc20

Sage is a free open-source mathematics software system licensed under the GPL. It combines the power of many existing open-source packages into a common Python-based interface...

[SECURITY] Fedora 21 Update: sagemath-6.3-5.fc21

Sage is a free open-source mathematics software system licensed under the GPL. It combines the power of many existing open-source packages into a common Python-based interface...