CVE-2018-6639

An out-of-bounds write Remote Code Execution issue was discovered in Design Science MathType 6.9c. A size used by memmove is read from the input file. This is fixed in 6.9d...

CVE-2018-6638

CVE-2018-6638 affects Design Science MathType 6.9c. A stack-based buffer overflow occurs in a function call where the first argument is a corrupted offset and the second is a stack buffer, enabling Remote Code Execution. The issue is fixed in MathType 6.9d. Connected sources also describe the vul...

CVE-2018-6639

CVE-2018-6639: Design Science MathType 6.9c contains an out-of-bounds write that reads a size for memmove from the input file, enabling remote code execution. Affects MathType 6.9c; fixed in 6.9d. Evidence from multiple sources confirms the flaw and the exact fix version; no exploitation details ...

CVE-2018-6638

A stack-based buffer overflow Remote Code Execution issue was discovered in Design Science MathType 6.9c. This occurs in a function call in which the first argument is a corrupted offset value and the second argument is a stack buffer. This is fixed in 6.9d...

CVE-2018-6641

An Arbitrary Free Remote Code Execution issue was discovered in Design Science MathType 6.9c. Crafted input can overwrite a structure, leading to a function call with an invalid parameter, and a subsequent free of important data such as a function pointer or list pointer. This is fixed in 6.9d...

CVE-2018-6640

A Heap Overflow Remote Code Execution issue was discovered in Design Science MathType 6.9c. Crafted input can modify the next pointer of a linked list. This is fixed in 6.9d...

CVE-2018-6640

CVE-2018-6640 affects Design Science MathType 6.9c. A heap overflow allows crafted input to modify the next pointer in a linked list, enabling remote code execution. The issue is fixed in MathType 6.9d. The provided documents do not include exploitation status or in-the-wild details. Remediation ...

CVE-2018-6641

The vulnerability CVE-2018-6641 affects Design Science MathType 6.9c. An arbitrary free (remote code execution) issue can occur when crafted input overwrites a structure, causing a function call with an invalid parameter and subsequently frees important data (e.g., a function pointer or list poin...

Design Science MathType Out-of-Bounds Write Vulnerability

Design Science MathType is an interactive math editor from Design Science, Inc. that edits math formulas in web pages, presentations, and other documents. A security vulnerability exists in Design Science MathType version 6.9c. A remote attacker can exploit this vulnerability to cause a denial of...

Design Science MathType Stack Buffer Overflow Vulnerability

Design Science MathType is an interactive math editor from Design Science, Inc. that can edit math formulas in web pages, presentations, and other documents. A stack buffer overflow vulnerability exists in Design Science MathType version 6.9c. A remote attacker can exploit this vulnerability to...

Design Science MathType Remote Code Execution Vulnerability

Design Science MathType is an interactive math editor from Design Science, Inc. that edits math formulas in web pages, presentations, and other documents. A security vulnerability exists in Design Science MathType version 6.9c. The vulnerability can be exploited by an attacker with specially...

Design Science MathType Heap Buffer Overflow Vulnerability

Design Science MathType is an interactive math editor from Design Science, Inc. that edits math formulas in web pages, presentations, and other documents. A heap buffer overflow vulnerability exists in Design Science MathType version 6.9c. A remote attacker can exploit this vulnerability with...

science.goldenarticles.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-562240 Description| Value ---|--- Affected Website:| science.goldenarticles.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

ebooks.benthamscience.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-562037 Description| Value ---|--- Affected Website:| ebooks.benthamscience.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

LogicalDOC Enterprise 7.7.4 - Directory Traversal Vulnerability

Exploit for java platform in category web applications LogicalDOC Enterprise 7.7.4 Multiple Directory Traversal Vulnerabilities Vendor: LogicalDOC Srl Product web page: https://www.logicaldoc.com Affected version: 7.7.4 7.7.3 7.7.2 7.7.1 7.6.4 7.6.2 7.5.1 7.4.2 7.1.1 Summary: LogicalDOC is a free...

LogicalDOC Enterprise 7.7.4 Username Enumeration Weakness

Summary LogicalDOC is a free document management system that is designed to handle and share documents within an organization. LogicalDOC is a content repository, with Lucene indexing, Activiti workflow, and a set of automatic import procedures. Description The weakness is caused due to the...

LogicalDOC Enterprise 7.7.4 Multiple Directory Traversal Vulnerabilities

Summary LogicalDOC is a free document management system that is designed to handle and share documents within an organization. LogicalDOC is a content repository, with Lucene indexing, Activiti workflow, and a set of automatic import procedures. Description The application suffers from multiple...

LogicalDOC Enterprise 7.7.4 Reflected Cross-Site Scripting Vulnerabilities

Summary LogicalDOC is a free document management system that is designed to handle and share documents within an organization. LogicalDOC is a content repository, with Lucene indexing, Activiti workflow, and a set of automatic import procedures. Description LogicalDOC suffers from multiple...

Grammarly Patches Chrome Extension Bug That Exposed Users’ Docs

UPDATE Grammarly has fixed a bug with its Chrome browser extension that exposed its authorization tokens to websites, allowing sites to assume the identity of a user and view their account’s documents. “I’m calling this a high severity bug, because it seems like a pretty severe violation of user...

CVE-2017-15536

An issue was discovered in Cloudera Data Science Workbench CDSW 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain...