Lucene search
+L

116 matches found

CNNVD
CNNVD
•added 2024/01/24 12:00 a.m.•16 views

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and earlier, which stems from a stack overflow vulnerability in the validate method. A remote attacker can exploit this vulnerability to execute arbitrary code via a crafted stri...

9.8CVSS7.9AI score0.01277EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/01/24 12:00 a.m.•6 views

CVE-2023-51890

An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...

7.2AI score0.00856EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/01/24 12:00 a.m.•10 views

CVE-2023-51886

Buffer Overflow vulnerability in the main function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath...

7.2AI score0.00826EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/01/24 12:00 a.m.•41 views

CVE-2023-51888

Buffer Overflow vulnerability in the nomath function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL...

7.5AI score0.00826EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/01/24 12:00 a.m.•39 views

CVE-2023-51887

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...

10AI score0.02472EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/01/24 12:00 a.m.•19 views

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and prior versions, which stems from a command injection vulnerability. A remote attacker can use this vulnerability to execute arbitrary code via a crafted string in the...

9.8CVSS8.2AI score0.02472EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2024/01/24 12:00 a.m.•51 views

CVE-2023-51886

Buffer Overflow vulnerability in the main function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath...

7.5CVSS7.4AI score0.00826EPSS
SaveExploits1
CNNVD
CNNVD
•added 2024/01/24 12:00 a.m.•16 views

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and earlier, which stems from a buffer overflow vulnerability in the main method. A remote attacker can exploit this vulnerability to cause a denial of service when using...

7.5CVSS7.1AI score0.00826EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/24 12:00 a.m.•2 views

CVE-2023-51890: Loop with Unreachable Exit Condition

An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...

7.5CVSS7.3AI score0.00856EPSS
SaveExploits1References3
Veracode
Veracode
•added 2020/12/06 3:51 a.m.•27 views

Buffer Overflow

mathtex is vulnerable to buffer overflow. The vulnerability is caused by improper bounds checking by the mathtex.cgi script. An attacker may inflict a buffer overflow and execute arbitrary code on the system or cause the application to crash...

10CVSS3.4AI score0.02707EPSS
SaveExploits1References7Affected Software1
Veracode
Veracode
•added 2020/12/06 3:51 a.m.•28 views

Insecure Temporary File

mathtex is vulnerable to insecure temporary file. An attacker can gain access to the temporary files and use it for local attack vectors...

7.2CVSS3.6AI score0.00364EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
•added 2010/10/06 12:00 a.m.•63 views

mathTeX mathtex.cgi getdirective Function dpi Tag Arbitrary Code Execution

The remote web server hosts mathTeX, a CGI script for displaying math on the web. The version of this application installed on the remote host fails to sanitize input via the 'dpi' or 'density' tags in an expression of shell metacharacters in the 'getdirective' function before using it in a call ...

7.5CVSS5.8AI score0.02156EPSS
SaveExploits0References4
Prion
Prion
•added 2009/07/14 8:30 p.m.•24 views

Design/Logic Flaw

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

7.2CVSS7AI score0.00364EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
•added 2009/07/14 8:30 p.m.•33 views

CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

7.2CVSS5.9AI score0.00364EPSS
SaveExploits0References1
OSV
OSV
•added 2009/07/14 8:30 p.m.•12 views

CVE-2009-2460

Multiple stack-based buffer overflows in mathtex.cgi in mathTeX, when downloaded before 20090713, have unspecified impact and remote attack vectors...

7AI score
SaveExploits0References8
OSV
OSV
•added 2009/07/14 8:30 p.m.•11 views

CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

6.2AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2009/07/14 8:30 p.m.•43 views

CVE-2009-2460

Multiple stack-based buffer overflows in mathtex.cgi in mathTeX, when downloaded before 20090713, have unspecified impact and remote attack vectors...

10CVSS6.2AI score0.02707EPSS
SaveExploits1References1
OSV
OSV
•added 2009/07/14 8:30 p.m.•14 views

DEBIAN-CVE-2009-1383

The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag...

7.5CVSS7.8AI score0.02156EPSS
SaveExploits0References1
OSV
OSV
•added 2009/07/14 8:30 p.m.•14 views

DEBIAN-CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

7.2CVSS6.7AI score0.00364EPSS
SaveExploits0References1
OSV
OSV
•added 2009/07/14 8:30 p.m.•14 views

DEBIAN-CVE-2009-2460

Multiple stack-based buffer overflows in mathtex.cgi in mathTeX, when downloaded before 20090713, have unspecified impact and remote attack vectors...

10CVSS7.5AI score0.02707EPSS
SaveExploits1References1
Rows per page
Query Builder