Lucene search
+L

55 matches found

AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•13 views

Astra Linux – Vulnerability in Thunderbird

The parent process does not properly check whether the Speech Synthesis feature is enabled when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9...

6.5CVSS6.8AI score0.00456EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2001-0939

Malware in sbrugna...

7.2CVSS6.2AI score0.01582EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-0393

Malicious code in bioql PyPI...

5.3CVSS5.9AI score0.00482EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2022-34223

Malicious code in bioql PyPI...

6.5CVSS6.9AI score0.00456EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2025/04/21 12:00 a.m.•16 views

SOLIDO: a Robust Watermarking Method for Speech Synthesis Via Low-Rank Adaptation

Whitepaper called SOLIDO: A Robust Watermarking Method For Speech Synthesis Via Low-Rank Adaptation...

7AI score
SaveExploits0
Amazon
Amazon
•added 2025/04/01 12:00 a.m.•20 views

Important: thunderbird

Issue Overview: Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. This vulnerability affects Thunderbird 91.9, Firefox ESR 91.9, and Firefox 100. CVE-2022-29912 The parent process would not properly check whether the Speech Synthesis feature is...

8.1CVSS7.7AI score0.00675EPSS
SaveExploits2
Amazon
Amazon
•added 2025/04/01 12:00 a.m.•30 views

Important: thunderbird

Issue Overview: Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. This vulnerability affects Thunderbird 91.9, Firefox ESR 91.9, and Firefox 100. CVE-2022-29912 The parent process would not properly check whether the Speech Synthesis feature is...

8.1CVSS7.7AI score0.00675EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
•added 2024/06/24 12:00 a.m.•18 views

Speech API Software Interface Privilege Exploitation

The vulnerability of the Speech API SAPI software interface for speech recognition and synthesis in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...

10CVSS6.5AI score0.01729EPSS
SaveExploits0References3
NVD
NVD
•added 2024/01/31 5:15 p.m.•58 views

CVE-2024-24566

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. When the application is password-protected deployed with the ACCESSCODE option, it is possible to access plugins without proper authorization without password. This vulnerabili...

5.3CVSS5.1AI score0.00482EPSS
SaveExploits1References2
Prion
Prion
•added 2024/01/31 5:15 p.m.•26 views

Authorization

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. When the application is password-protected deployed with the ACCESSCODE option, it is possible to access plugins without proper authorization without password. This vulnerabili...

5CVSS7AI score0.00482EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2024/01/31 4:33 p.m.•153 views

CVE-2024-24566 Lobe Chat unauthorized access to plugins

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. When the application is password-protected deployed with the ACCESSCODE option, it is possible to access plugins without proper authorization without password. This vulnerabili...

5.3CVSS5.3AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/01/31 4:33 p.m.•8 views

CVE-2024-24566 Lobe Chat unauthorized access to plugins

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. When the application is password-protected deployed with the ACCESSCODE option, it is possible to access plugins without proper authorization without password. This vulnerabili...

5.3CVSS5.9AI score0.00482EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2023/02/15 5:30 a.m.•12 views

SUSE CVE-2014-1700

Use-after-free vulnerability in modules/speech/SpeechSynthesis.cpp in Blink, as used in Google Chrome before 33.0.1750.149, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of a certain utterance data structure...

7.5CVSS9.6AI score0.01485EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 3:26 a.m.•14 views

SUSE CVE-2022-29913

The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9...

6.1CVSS8.9AI score0.00456EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2022/12/22 8:15 p.m.•18 views

CVE-2022-29913

The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9...

6.5CVSS9AI score0.00456EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2022/12/22 8:15 p.m.•10 views

DEBIAN-CVE-2022-29913

The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9...

6.5CVSS6.7AI score0.00456EPSS
SaveExploits0References1
NVD
NVD
•added 2022/12/22 8:15 p.m.•36 views

CVE-2022-29913

The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9...

6.5CVSS0.00456EPSS
SaveExploits0References2
Prion
Prion
•added 2022/12/22 8:15 p.m.•35 views

Design/Logic Flaw

The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9...

4.3CVSS7.3AI score0.00456EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/22 12:00 a.m.•6 views

CVE-2022-29913: Improper Authorization

The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9...

6.5CVSS5.9AI score0.00456EPSS
SaveExploits0References2
CVE
CVE
•added 2022/12/22 12:00 a.m.•265 views

CVE-2022-29913

The CVE-2022-29913 vulnerability affects Thunderbird prior to version 91.9, caused by the parent process not properly checking if Speech Synthesis is enabled when handling commands from a child process. The issue is confirmed in multiple sources (e.g., CentOS/RH advisories and Astra Linux) and is...

6.5CVSS7.3AI score0.00456EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder