Lucene search
K

75 matches found

RedhatCVE
RedhatCVE
added 2 days ago6 views

CVE-2026-27781

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS...

3.3CVSS5.4AI score0.00015EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/19 2:59 a.m.3 views

CVE-2026-27781

in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS...

3.3CVSS5.8AI score0.00015EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-27781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c. CVE-2023-27781 Note that Nessus relies on the presence of th...

7.8CVSS7.2AI score0.00161EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/03/21 10:24 p.m.5 views

CVE-2025-27781

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in inference.py. modelfile in inference.py as well as modelfile in tts.py take user-supplied input e.g. a path to a model and pass that value to the changechoices and later to getspeakersid...

9.8CVSS7.8AI score0.10396EPSS
Exploits0References1
Circl
Circl
added 2025/03/19 9:18 p.m.4 views

CVE-2025-27781

creationtimestamp| type| source ---|---|--- 2025-03-19 21:18:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8156 2025-03-19 22:01:14+00:00| published-proof-of-concept| Telegram/jlMT5pQePgK5GBSq5wMoupEVU9UT7ofYY1WgfO6aSFHSaLY 2025-03-19 23:00:20+00:00| seen|...

9.8CVSS4.8AI score0.10396EPSS
Exploits0References3
NVD
NVD
added 2025/03/19 9:15 p.m.11 views

CVE-2025-27781

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in inference.py. modelfile in inference.py as well as modelfile in tts.py take user-supplied input e.g. a path to a model and pass that value to the changechoices and later to getspeakersid...

9.8CVSS0.10396EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/03/19 8:22 p.m.8 views

CVE-2025-27781 Applio allows unsafe deserialization in inference.py

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in inference.py. modelfile in inference.py as well as modelfile in tts.py take user-supplied input e.g. a path to a model and pass that value to the changechoices and later to getspeakersid...

9.3CVSS7.5AI score0.10396EPSS
Exploits0References5
CVE
CVE
added 2025/03/19 8:22 p.m.58 views

CVE-2025-27781

Applio is affected by CVE-2025-27781 through unsafe deserialization in the inference.py module (and related tts.py input handling). Versions 3.2.8-bugfix and prior are vulnerable because user-supplied model_file values are passed to change_choices/get_speakers_id, which loads models with torch.lo...

9.8CVSS7.4AI score0.10396EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2025/03/19 8:22 p.m.4 views

CVE-2025-27781 Applio allows unsafe deserialization in inference.py

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in inference.py. modelfile in inference.py as well as modelfile in tts.py take user-supplied input e.g. a path to a model and pass that value to the changechoices and later to getspeakersid...

9.3CVSS8AI score0.10396EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/02/14 4:39 a.m.4 views

CVE-2024-27781

An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all...

9CVSS7.2AI score0.07509EPSS
Exploits0References1
Circl
Circl
added 2025/02/11 4:21 p.m.3 views

CVE-2024-27781

creationtimestamp| type| source ---|---|--- 2025-02-11 16:21:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113986167638267246 2025-02-11 17:16:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5xtb55k2g 2025-02-11 17:45:28+00:00| seen|...

9CVSS4.8AI score0.07509EPSS
Exploits0References3
CVE
CVE
added 2025/02/11 4:9 p.m.44 views

CVE-2024-27781

CVE-2024-27781 is an XSS vulnerability in Fortinet FortiSandbox products due to improper neutralization of input during web page generation. The issue affects FortiSandbox versions 3.0.0–3.2.x, 4.0.0–4.0.4, 4.2.0–4.2.6, and 4.4.0–4.4.4, allowing an authenticated attacker to execute unauthorized c...

9CVSS6.7AI score0.07509EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/02/11 4:9 p.m.9 views

CVE-2024-27781

An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all...

7.1CVSS0.07509EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/07/24 12:0 a.m.23 views

Photon OS 3.0: Curl PHSA-2022-3.0-0406

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0406. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.5CVSS6.9AI score0.00682EPSS
Exploits7References8
Tenable Nessus
Tenable Nessus
added 2024/07/23 12:0 a.m.28 views

Photon OS 4.0: Curl PHSA-2022-4.0-0205

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0205. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.5CVSS6.9AI score0.00682EPSS
Exploits7References8
IBM Security Bulletins
IBM Security Bulletins
added 2024/04/12 2:33 p.m.42 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details...

9.8CVSS9.9AI score0.03367EPSS
Exploits11Affected Software1
OSV
OSV
added 2023/04/15 7:3 p.m.3 views

MGASA-2023-0143 Updated jpegoptim packages fix security vulnerability

A heap overflow can occur with crafted JPEG image file. CVE-2023-27781...

7.8CVSS7.7AI score0.00161EPSS
Exploits1References4
Circl
Circl
added 2023/03/15 5:24 p.m.0 views

CVE-2023-27781

creationtimestamp| type| source ---|---|--- 2023-03-15 17:24:49+00:00| seen| https://t.me/cibsecurity/60052...

7.8CVSS7.4AI score0.00161EPSS
Exploits1References1
OSV
OSV
added 2023/03/15 3:15 p.m.10 views

CVE-2023-27781

jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c...

7.8CVSS8AI score
Exploits0References2
NVD
NVD
added 2023/03/15 3:15 p.m.8 views

CVE-2023-27781

jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c...

7.8CVSS7.7AI score0.00161EPSS
Exploits1References2
Rows per page
Query Builder