Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 4:48 a.m.•23 views

CVE-2019-25158

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...

9.8CVSS7.6AI score0.02115EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/12/19 3:30 p.m.•54 views

Pedroetb TTS-API OS Command Injection

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...

9.8CVSS7.9AI score0.02115EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2023/12/19 3:30 p.m.•20 views

GHSA-JX6Q-FQ9H-6G7Q Pedroetb TTS-API OS Command Injection

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...

9.8CVSS9.9AI score0.02115EPSS
SaveExploits0References6
NVD
NVD
•added 2023/12/19 1:15 p.m.•31 views

CVE-2019-25158

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...

9.8CVSS0.02115EPSS
SaveExploits0References4
Prion
Prion
•added 2023/12/19 1:15 p.m.•26 views

Command injection

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...

7.5CVSS7.8AI score0.02115EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2023/12/19 1:00 p.m.•70 views

CVE-2019-25158

CVE-2019-25158 affects pedroetb tts-api up to version 2.1.4. The vulnerability is in the onSpeechDone function of app.js, enabling OS command injection. A fix is available in version 2.2.0, with the patch identified as 29d9c25415911ea2f8b6de247cb5c4607d13d434. Upgrading to 2.2.0 is recommended to...

9.8CVSS7.9AI score0.02115EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/19 12:00 a.m.•21 views

PT-2023-11383 · Pedroetb · Tts-Api

Name of the Vulnerable Software and Affected Versions: pedroetb tts-api versions up to 2.1.4 Description: A critical vulnerability has been found in the pedroetb tts-api, affecting the onSpeechDone function of the file app.js. This issue leads to os command injection. Recommendations: For pedroet...

9.8CVSS7.8AI score0.02115EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/19 12:00 a.m.•1 views

CVE-2019-25158: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...

9.8CVSS5.8AI score0.02115EPSS
SaveExploits0References2
Rows per page
Query Builder