7624 matches found
DEBIAN-CVE-2023-49994
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c...
AZL-34676 CVE-2023-49994 affecting package espeak-ng for versions less than 1.52.0-1
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c...
UBUNTU-CVE-2023-49994
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c...
CVE-2023-41119
An issue was discovered in EnterpriseDB Postgres Advanced Server EPAS before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contains the function dbmsaqmovetoexceptionqueue that may be used to elevate a user's privileges to superuser. This...
OSV-2023-1286 Security exception in java.base/sun.security.util.DerInputStream.getUnalignedBitString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64975 Crash type: Security exception Crash state: java.base/sun.security.util.DerInputStream.getUnalignedBitString java.base/sun.security.x509.X509Key.parse java.base/sun.security.x509.CertificateX509Key...
PT-2023-9305 · Espeak-Ng +6 · Espeak-Ng +6
Name of the Vulnerable Software and Affected Versions: Espeak-ng version 1.52-dev Description: The issue is related to a Floating Point Exception via the function PeaksToHarmspect at wavegen.c. This can potentially allow an attacker to cause a denial of service or execute arbitrary code due to...
EnterpriseDB Postgres Advanced Server Security Vulnerability
EnterpriseDB Postgres Advanced Server EPAS is an application from EnterpriseDB, Inc. used to extend the functionality of Postgres databases. A security vulnerability exists in EnterpriseDB Postgres Advanced Server that stems from the inclusion of the function dbmsaqmovetoexceptionqueue, which can...
CVE-2023-49994
CVE-2023-49994 affects espeak-ng. Multiple connected sources confirm a Floating Point Exception in PeaksToHarmspect, triggered in wavegen.c, specifically for version 1.52-dev. The issue is described consistently across advisories and Nessus plugins, with affected deployments including Azure Linux...
eSpeak NG Security Vulnerability
eSpeak NG is an open source software text-to-speech synthesizer from eSpeak NG Open Source. A security vulnerability exists in eSpeak NG version 1.52-dev, which stems from a floating point exception in the PeaksToHarmspect method of the wavegen.c file...
CVE-2023-49994
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c...
PT-2023-27802 · Enterprisedb · Enterprisedb Postgres Advanced Server
Name of the Vulnerable Software and Affected Versions: EnterpriseDB Postgres Advanced Server EPAS versions prior to 11.21.32 EnterpriseDB Postgres Advanced Server EPAS versions 12.x prior to 12.16.20 EnterpriseDB Postgres Advanced Server EPAS versions 13.x prior to 13.12.16 EnterpriseDB Postgres...
CVE-2023-49994
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c...
CVE-2023-49994
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c...
Researchers Unveil GuLoader Malware's Latest Anti-Analysis Techniques
Threat hunters have unmasked the latest tricks adopted by a malware strain called GuLoader in an effort to make analysis more challenging. "While GuLoader's core functionality hasn't changed drastically over the past few years, these constant updates in their obfuscation techniques make analyzing...
OSV-2023-1266 Security exception in java.base/javax.crypto.spec.SecretKeySpec.<init>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64768 Crash type: Security exception Crash state: java.base/javax.crypto.spec.SecretKeySpec. org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock...
OSV-2023-1265 Security exception in org.apache.poi.hdgf.streams.ChunkStream.findChunks
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64782 Crash type: Security exception Crash state: org.apache.poi.hdgf.streams.ChunkStream.findChunks org.apache.poi.hdgf.streams.PointerContainingStream.findChildren...
PT-2023-35629 · Apache · Apache Poi
Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception occurs in the javax.crypto.spec.SecretKeySpec constructor, which is called by org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock. This issue ...
CVE-2023-42576
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler...