73 matches found
CVE-2024-1275 Vulnerability in Baxter Welch Allyn Connex Spot Monitor
Use of Default Cryptographic Key vulnerability in Baxter Welch Allyn Connex Spot Monitor may allow Configuration/Environment Manipulation.This issue affects Welch Allyn Connex Spot Monitor in all versions prior to 1.52...
OESA-2024-1021 espeak-ng security update
The eSpeak NG is a compact open source software text-to-speech synthesizer for Linux, Windows, Android and other operating systems. It supports 70 languages and accents. It is based on the eSpeak engine created by Jonathan Duddington. Security Fixes: Espeak-ng 1.52-dev was discovered to contain a...
SUSE CVE-2023-49991
Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c...
CVE-2023-49994
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c...
CVE-2023-49993
Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow via the function ReadClause at readclause.c...
Buffer overflow
Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c...
eSpeak NG Security Vulnerability
eSpeak NG is an open source software text-to-speech synthesizer from eSpeak NG Open Source. A security vulnerability exists in eSpeak NG version 1.52-dev, which stems from a floating point exception in the PeaksToHarmspect method of the wavegen.c file...
CVE-2023-49992
CVE-2023-49992 affects espeak-ng. Multiple connected feeds confirm a Stack Buffer Overflow in espeak-ng’s dictionary.c RemoveEnding function for version 1.52-dev. Impact and exploit details are not expanded beyond the overflow description in the sources; no vendor/server-side exploit notes are pr...
CVE-2023-49991
Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c...
CVE-2023-49994
CVE-2023-49994 affects espeak-ng. Multiple connected sources confirm a Floating Point Exception in PeaksToHarmspect, triggered in wavegen.c, specifically for version 1.52-dev. The issue is described consistently across advisories and Nessus plugins, with affected deployments including Azure Linux...
CVE-2023-49990
CVE-2023-49990 affects espeak-ng, where a buffer overflow is introduced via SetUpPhonemeTable in synthdata.c for the 1.52-dev release. The connected advisories confirm this issue across multiple distributions and note that fixes have been released: Debian lists a patched version (1.50+dfsg-7+deb1...
CVE-2023-49994
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c...
CVE-2023-49992
Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c...
SUSE CVE-2020-36323
In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...
SUSE CVE-2021-31162
In the standard library in Rust before 1.52.0, a double free can occur in the Vec::fromiter function if freeing the element panics...
rust: panic safety issue in Zip implementation
In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls iteratorgetunchecked more than once for the same index when the underlying iterator panics in certain conditions. This bug could lead to a memory safety violation due to an unmet safety...
RUSTSEC-2021-0095 `mopa` is technically unsound
The mopa crate redefines the deprecated TraitObject struct from core::raw like so: rust reprC deriveCopy, Clone dochidden pub struct TraitObject pub data: mut , pub vtable: mut , This is done to then transmute a reference to a trait object &dyn Trait for any trait Trait into this struct and...
CVE-2021-32632 CSRF allowing modification of commands, modules, banphrases through hidden iFrames
Pajbot is a Twitch chat bot. Pajbot versions prior to 1.52 are vulnerable to cross-site request forgery CSRF. Hosters of the bot should upgrade to v1.52 or stable to install the patch or, as a workaround, can add one modern dependency...
In the standard library in Rust before 1.52.0 the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.
...