Lucene search
+L

202 matches found

CNNVD
CNNVD
added 2024/06/16 12:0 a.m.10 views

Shenzhen Guoxin Synthesis Image System Security Vulnerability

Shenzhen Guoxin Synthesis image system is an image system from Shenzhen Guoxin Synthesis, a company based in Shenzhen, China. A security vulnerability exists in Shenzhen Guoxin Synthesis Image System versions prior to 8.3.0 that originates from allowing unauthorized user information to be retriev...

7.5CVSS6.4AI score0.00379EPSS
SaveExploits0References2
CVE
CVE
added 2024/06/16 12:0 a.m.55 views

CVE-2024-38466

The CVE-2024-38466 issue affects Shenzhen Guoxin Synthesis image system up to version 8.3.0, where a default credential 123456Qw is present. Multiple connected sources confirm the vulnerability stems from a hard-coded/default password, enabling unauthorized access if standard credentials are not ...

9.8CVSS7AI score0.00421EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/16 12:0 a.m.11 views

PT-2024-28021 · Shenzhen Guoxin · Shenzhen Guoxin Synthesis Image System

Name of the Vulnerable Software and Affected Versions: Shenzhen Guoxin Synthesis image system versions prior to 8.3.0 Description: The issue allows unauthorized user information retrieval. This is achieved via the "queryUser API" endpoint. Recommendations: For versions prior to 8.3.0, update to...

7.5CVSS7AI score0.00379EPSS
SaveExploits0References3
NVD
NVD
added 2024/04/01 3:15 p.m.25 views

CVE-2024-21463

Memory corruption while processing Codec2 during v13k decoder pitch synthesis...

9.8CVSS7.4AI score0.00291EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/01 3:6 p.m.81 views

CVE-2024-21463

CVE-2024-21463 describes memory corruption in Codec2 during v13k decoder pitch synthesis, affecting Qualcomm chipsets (closed‑source components) per the provided records. The vulnerability is triggered in the Codec2 processing path, leading to potential impact on confidentiality, integrity, and a...

9.8CVSS7.4AI score0.00291EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/01 3:6 p.m.15 views

CVE-2024-21463 Buffer Copy Without Checking Size of Input in Audio

Memory corruption while processing Codec2 during v13k decoder pitch synthesis...

7.3CVSS7.2AI score0.00291EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/01 3:6 p.m.40 views

CVE-2024-21463 Buffer Copy Without Checking Size of Input in Audio

Memory corruption while processing Codec2 during v13k decoder pitch synthesis...

7.3CVSS7.6AI score0.00291EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/01 12:0 a.m.7 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which originates from a memory corruption that occurs when processing Codec2 during tone synthesis in the v13k decoder...

9.8CVSS6.7AI score0.00291EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/04/01 12:0 a.m.8 views

PT-2024-18886 · Unknown · V13K Decoder

Name of the Vulnerable Software and Affected Versions: v13k decoder affected versions not specified Description: The issue is related to memory corruption that occurs while processing Codec2 during v13k decoder pitch synthesis. Recommendations: At the moment, there is no information about a newer...

9.8CVSS7.1AI score0.00291EPSS
SaveExploits0References4
NVD
NVD
added 2024/01/31 5:15 p.m.47 views

CVE-2024-24566

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. When the application is password-protected deployed with the ACCESSCODE option, it is possible to access plugins without proper authorization without password. This vulnerabili...

5.3CVSS5.1AI score0.00482EPSS
SaveExploits1References2
Prion
Prion
added 2024/01/31 5:15 p.m.17 views

Authorization

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. When the application is password-protected deployed with the ACCESSCODE option, it is possible to access plugins without proper authorization without password. This vulnerabili...

5CVSS7AI score0.00482EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/31 4:33 p.m.2 views

CVE-2024-24566 Lobe Chat unauthorized access to plugins

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. When the application is password-protected deployed with the ACCESSCODE option, it is possible to access plugins without proper authorization without password. This vulnerabili...

5.3CVSS7AI score0.00482EPSS
SaveExploits1References2
OSV
OSV
added 2024/01/31 4:33 p.m.135 views

CVE-2024-24566 Lobe Chat unauthorized access to plugins

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. When the application is password-protected deployed with the ACCESSCODE option, it is possible to access plugins without proper authorization without password. This vulnerabili...

5.3CVSS5.3AI score0.00482EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2024/01/20 12:0 a.m.11 views

Fedora: Security Advisory for espeak-ng (FEDORA-2024-698737a3c5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.7AI score0.00405EPSS
SaveExploits5References2
Fedora
Fedora
added 2024/01/19 3:25 a.m.24 views

[SECURITY] Fedora 38 Update: espeak-ng-1.51.1-6.fc38

The eSpeak NG Next Generation Text-to-Speech program is an open source spee ch synthesizer that supports over 70 languages. It is based on the eSpeak engine created by Jonathan Duddington. It uses spectral formant synthesis by default which sounds robotic, but can be configured to use Klatt forma...

5.5CVSS5.3AI score0.00405EPSS
SaveExploits5
Fedora
Fedora
added 2024/01/10 1:9 a.m.26 views

[SECURITY] Fedora 39 Update: espeak-ng-1.51.1-6.fc39

The eSpeak NG Next Generation Text-to-Speech program is an open source spee ch synthesizer that supports over 70 languages. It is based on the eSpeak engine created by Jonathan Duddington. It uses spectral formant synthesis by default which sounds robotic, but can be configured to use Klatt forma...

5.5CVSS5.3AI score0.00405EPSS
SaveExploits5
CNVD
CNVD
added 2023/12/15 12:0 a.m.47 views

Adobe After Effects Buffer Overflow Vulnerability (CNVD-2023-9999094)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. A security vulnerability exists in Adobe After Effects, which can be...

5.5CVSS6.7AI score0.00377EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.10 views

The vulnerability of the Speech API’s software interface for speech recognition and synthesis on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Speech API SAPI software interface for speech recognition and synthesis in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.4CVSS7.3AI score0.0061EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/11/21 12:0 a.m.50 views

Adobe After Effects Out-of-Bounds Write Vulnerability (CNVD-2023-91790)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. An out-of-bounds write vulnerability exists in Adobe After Effects versions...

7.8CVSS7.6AI score0.00359EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/11/21 12:0 a.m.41 views

Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2023-91794)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. AAdobe After Effects version 24.0.2 and earlier and version 23.6 and earlie...

7.8CVSS7.6AI score0.00397EPSS
SaveExploits0References1
Rows per page
Query Builder