CVE-2024-32944

Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer .uar file, .zip file to UTAU, an arbitrary file may be placed...

CVE-2024-28886

OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file .ust file, an arbitrary OS command may be executed...

CVE-2024-28886

OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file .ust file, an arbitrary OS command may be executed...

CVE-2024-32944

Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer .uar file, .zip file to UTAU, an arbitrary file may be placed...

CVE-2024-28886

OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file .ust file, an arbitrary OS command may be executed...

CVE-2024-28886

OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file .ust file, an arbitrary OS command may be executed...

CVE-2024-28886

An OS command injection vulnerability (CWE-78) exists in UTAU versions prior to v0.4.19 . The flaw allows an attacker to execute arbitrary OS commands if a user opens a crafted UTAU project file (.ust file) . To resolve this, users should update the software to version v0.4.19 or later. As a temp...

CVE-2024-32944

A path traversal vulnerability exists in UTAU versions prior to v0.4.19 . This flaw allows an attacker to place an arbitrary file on the system if a user installs a crafted UTAU voicebank installer, specifically in .uar or .zip file formats. To remediate this, users should update the software to ...

CVE-2024-32944

Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer .uar file, .zip file to UTAU, an arbitrary file may be placed...

CVE-2024-32944

Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer .uar file, .zip file to UTAU, an arbitrary file may be placed...

JVN#71404925: Multiple vulnerabilities in UTAU

UTAU provided by ameya/ayame contains multiple vulnerabilities listed below. OS command injection CWE-78 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Base Score 5.3 CVE-2024-28886 Path Traversal CWE-22 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Base Score 3.3 CVE-2024-32944 Impact If a user of...

PT-2024-22626 · Utau · Utau

Name of the Vulnerable Software and Affected Versions: UTAU versions prior to v0.4.19 Description: An OS command injection issue exists, allowing the execution of arbitrary OS commands if a user opens a crafted UTAU project file .ust file. Recommendations: For versions prior to v0.4.19, update to...

PT-2024-24991 · Utau · Utau

Name of the Vulnerable Software and Affected Versions: UTAU versions prior to v0.4.19 Description: A path traversal issue exists, allowing an arbitrary file to be placed if a user installs a crafted UTAU voicebank installer, such as a .uar or .zip file, to UTAU. Recommendations: For versions prio...

UTAU 安全漏洞

UTAU is a Japanese UTAU open source song synthesizer created for Windows. A security vulnerability exists in UTAU versions prior to v0.4.19 that stems from the presence of a path traversal vulnerability...

UTAU 安全漏洞

UTAU is a Japanese UTAU open source song synthesizer created for Windows. A security vulnerability exists in UTAU versions prior to v0.4.19 that stems from the presence of an operating system command injection vulnerability...