Vulnerabilidades en Ankitects
11 resultadosAnálisis Vexday
Ankitects apresenta 8 vulnerabilidades catalogadas, com 1 crítica, mas nenhuma sob exploração ativa conhecida. A fraqueza dominante é CWE-829 (Inclusão de Funcionalidade de Fonte Não Confiável), sugerindo riscos em dependências ou integrações de terceiros. Ausência de publicações recentes indica que o risco é estável, sem novos impactos identificados nos últimos 90 dias.
CVE-2024-32484HIGHAn reflected XSS vulnerability exists in the handling of invalid paths in the Flask server in Ankitects Anki 24.04. A specially crafted flasEPSS 25.9%CVE-2024-26020CRITICALAn arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead EPSS 15.1%CVE-2024-32152LOWA blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can leadEPSS 12.1%CVE-2024-29073MEDIUMAn vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim pEPSS 11.7%CVE-2026-64677MEDIUMAnki's local HTTP server is vulnerable to directory traversal attacksEPSS 0.8%CVE-2025-43703MEDIUMAn issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API EPSS 0.2%CVE-2026-59153LOWAnki's local HTTP server does not sufficiently validate requestsEPSS 0.2%CVE-2026-58266MEDIUMAnki: User scripts in iframes have access to the internal Anki APIEPSS 0.2%CVE-2025-62187LOWIn Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux EPSS 0.2%CVE-2025-62185MEDIUMIn Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed EPSS 0.1%CVE-2025-62186MEDIUMAnkitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL schemeEPSS 0.1%