Lucene search
+L

116 matches found

Vulnrichment
Vulnrichment
•added 2024/01/24 12:00 a.m.•4 views

CVE-2023-51887

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...

9.8AI score0.02472EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/01/24 12:00 a.m.•25 views

PT-2024-14318 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted string in the application URL. This can be exploited by sending a specifically designed request to the affected...

9.8CVSS9.4AI score0.02472EPSS
SaveExploits1References12
Debian CVE
Debian CVE
•added 2024/01/24 12:00 a.m.•59 views

CVE-2023-51890

An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...

7.5CVSS7.4AI score0.00856EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/01/24 12:00 a.m.•58 views

CVE-2023-51888

Buffer Overflow vulnerability in the nomath function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL...

7.5CVSS7.3AI score0.00826EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2024/01/24 12:00 a.m.•12 views

CVE-2023-51888

Buffer Overflow vulnerability in the nomath function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL...

6.8AI score0.00826EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/01/24 12:00 a.m.•17 views

PT-2024-14317 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: The issue allows a remote attacker to cause a denial of service when using convertpath. It is related to a Buffer Overflow vulnerability in the main function. Recommendations: For Mathtex version...

7.5CVSS7.5AI score0.00826EPSS
SaveExploits1References13
Cvelist
Cvelist
•added 2024/01/24 12:00 a.m.•40 views

CVE-2023-51889

Stack Overflow vulnerability in the validate function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL...

9.9AI score0.01277EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/01/24 12:00 a.m.•43 views

CVE-2023-51886

Buffer Overflow vulnerability in the main function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath...

7.6AI score0.00826EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/01/24 12:00 a.m.•19 views

PT-2024-14319 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: The issue allows a remote attacker to cause a denial of service via a crafted string in the application URL, specifically exploiting a Buffer Overflow vulnerability in the nomath function...

7.5CVSS7.6AI score0.00826EPSS
SaveExploits1References14
CNNVD
CNNVD
•added 2024/01/24 12:00 a.m.•15 views

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and earlier versions, which stems from the presence of a discovery infinite loop problem. A remote attacker can exploit this vulnerability to consume CPU resources via a crafted...

7.5CVSS6.7AI score0.00856EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/24 12:00 a.m.•4 views

CVE-2023-51887: Improper Neutralization of Special Elements used in a Command

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...

9.8CVSS8.8AI score0.02472EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/01/24 12:00 a.m.•14 views

PT-2024-14321 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: An infinite loop issue in the software allows remote attackers to consume CPU resources via a crafted string in the application URL. This can lead to potential denial-of-service conditions...

7.5CVSS7.2AI score0.00856EPSS
SaveExploits1References13
CVE
CVE
•added 2024/01/24 12:00 a.m.•64 views

CVE-2023-51890

This CVE affects Mathtex 1.05 and earlier, where an infinite loop triggered by a crafted string in the application URL can cause a remote attacker to exhaust CPU. Affected component: Mathtex (URL parsing/handler logic) with a vulnerability leading to high impact on availability (A=High) and netwo...

7.5CVSS7.4AI score0.00856EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
•added 2024/01/24 12:00 a.m.•64 views

CVE-2023-51885

Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...

9.8CVSS9.8AI score0.01287EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/01/24 12:00 a.m.•52 views

CVE-2023-51887

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...

9.8CVSS9.8AI score0.02472EPSS
SaveExploits1
CVE
CVE
•added 2024/01/24 12:00 a.m.•76 views

CVE-2023-51889

CVE-2023-51889 : The vulnerability affects Mathtex versions 1.05 and earlier, caused by a stack overflow in the validate() function. This allows a remote attacker to execute arbitrary code via a crafted string in the application URL. Exploitation details are not provided in the core CVE descripti...

9.8CVSS9.6AI score0.01277EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2024/01/24 12:00 a.m.•82 views

CVE-2023-51887

The CVE-2023-51887 issue affects Mathtex versions 1.05 and earlier and is a Command Injection vulnerability. A remote attacker can send a crafted string in the application URL to execute arbitrary code on the affected system. The NVD/Red Hat/UBUNTU OSV entries confirm the same vector and indicate...

9.8CVSS9.8AI score0.02472EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/24 12:00 a.m.•1 views

CVE-2023-51890: Loop with Unreachable Exit Condition

An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...

7.5CVSS7.3AI score0.00856EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/01/24 12:00 a.m.•18 views

PT-2024-14320 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted string in the application URL. This is due to a Stack Overflow vulnerability in the validate function. Recommendations:...

9.8CVSS9.4AI score0.01277EPSS
SaveExploits1References13
CNNVD
CNNVD
•added 2024/01/24 12:00 a.m.•17 views

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and prior versions, which stems from the presence of a buffer overflow vulnerability. A remote attacker can exploit this vulnerability to execute arbitrary code via the length of...

9.8CVSS8.1AI score0.01287EPSS
SaveExploits1References2
Rows per page
Query Builder