Lucene search
K

26 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2014-0128

Malware in sbrugna...

3.3CVSS6.1AI score0.00058EPSS
Exploits1References9
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in test-mlw2-clips-flite (npm)

The package test-mlw2-clips-flite was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.0 views

MAL-2025-35091 Malicious code in test-mlw2-clips-flite (npm)

The package test-mlw2-clips-flite was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-34940 Malicious code in test-mlw2-batty-flite (npm)

The package test-mlw2-batty-flite was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in test-mlw2-batty-flite (npm)

The package test-mlw2-batty-flite was found to contain malicious code...

7AI score
Exploits0
Rockylinux
Rockylinux
added 2022/05/17 6:16 a.m.6 views

new packages: flite

An update is available for flite. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

2AI score
Exploits0
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.13 views

Mageia: Security Advisory (MGASA-2014-0047)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS6.6AI score0.00058EPSS
Exploits1References4
securityvulns
securityvulns
added 2014/02/18 12:0 a.m.39 views

[ MDVSA-2014:032 ] flite

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:032 http://www.mandriva.com/en/support/security/ Package : flite Date : February 14, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in flit...

3.3CVSS6AI score0.00058EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2014/02/16 12:0 a.m.25 views

Mandriva Linux Security Advisory : flite (MDVSA-2014:032)

Multiple vulnerabilities has been discovered and corrected in flite : The playwavefromsocket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these details are obtained from third party information...

3.3CVSS5.5AI score0.00058EPSS
Exploits1References1
OSV
OSV
added 2014/02/10 8:14 p.m.5 views

MGASA-2014-0047 Updated flite package fixes CVE-2014-0027

Updated flite packages fix security vulnerability: The playwavefromsocket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav CVE-2014-0027...

3.3CVSS6.3AI score0.00058EPSS
Exploits1References3
Mageia
Mageia
added 2014/02/10 8:14 p.m.23 views

Updated flite package fixes CVE-2014-0027

Updated flite packages fix security vulnerability: The playwavefromsocket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav CVE-2014-0027...

3.3CVSS6.2AI score0.00058EPSS
Exploits1References2
seebug.org
seebug.org
added 2014/02/10 12:0 a.m.17 views

Flite 'play_wave_from_socket()'不安全临时文件创建漏洞

BUGTRAQ ID: 64791 CVECAN ID: CVE-2014-0027 Flite是小型的实时综合性引擎。 Flite 1.4及其他版本中,audio/auserver.c的playwavefromsocket函数创建临时文件的方式不安全,本地用户通过对/tmp/awb.wav的符号链接攻击,利用此漏洞可修改任意文件。 0 festvox Flite 1.4 厂商补丁: festvox ------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.festvox.org/flite/...

3.3CVSS0.7AI score0.00058EPSS
Exploits1
Fedora
Fedora
added 2014/02/05 3:43 a.m.12 views

[SECURITY] Fedora 20 Update: flite-1.3-21.fc20

Flite festival-lite is a small, fast run-time speech synthesis engine developed at CMU and primarily designed for small embedded machines and/or large servers. Flite is designed as an alternative synthesis engine to Festival for voices built using the FestVox suite of voice building tools...

3.3CVSS2.9AI score0.00058EPSS
Exploits1
Fedora
Fedora
added 2014/02/05 3:38 a.m.8 views

[SECURITY] Fedora 19 Update: flite-1.3-20.fc19

Flite festival-lite is a small, fast run-time speech synthesis engine developed at CMU and primarily designed for small embedded machines and/or large servers. Flite is designed as an alternative synthesis engine to Festival for voices built using the FestVox suite of voice building tools...

3.3CVSS2.9AI score0.00058EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2014/02/05 12:0 a.m.27 views

Fedora 20 : flite-1.3-21.fc20 (2014-0579)

CVE-2014-0027 flite: insecure temporary file use Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

3.3CVSS5.4AI score0.00058EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2014/02/05 12:0 a.m.22 views

Fedora 19 : flite-1.3-20.fc19 (2014-0574)

CVE-2014-0027 flite: insecure temporary file use Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

3.3CVSS5.4AI score0.00058EPSS
Exploits1References3
OSV
OSV
added 2014/01/26 1:55 a.m.5 views

CVE-2014-0027

The playwavefromsocket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these details are obtained from third party information...

6AI score
Exploits0References7
OSV
OSV
added 2014/01/26 1:55 a.m.1 views

DEBIAN-CVE-2014-0027

The playwavefromsocket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these details are obtained from third party information...

3.3CVSS6.7AI score0.00058EPSS
Exploits1References1
NVD
NVD
added 2014/01/26 1:55 a.m.10 views

CVE-2014-0027

The playwavefromsocket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these details are obtained from third party information...

3.3CVSS6.1AI score0.00058EPSS
Exploits1References7
Prion
Prion
added 2014/01/26 1:55 a.m.15 views

Information disclosure

The playwavefromsocket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these details are obtained from third party information...

3.3CVSS6.6AI score0.00058EPSS
Exploits1References7Affected Software1
Rows per page
Query Builder