Lucene search
K

6 matches found

OSV
OSV
added 2023/12/19 3:30 p.m.12 views

GHSA-JX6Q-FQ9H-6G7Q Pedroetb TTS-API OS Command Injection

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...

9.8CVSS9.9AI score0.00692EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2023/12/19 3:30 p.m.30 views

Pedroetb TTS-API OS Command Injection

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...

9.8CVSS7.9AI score0.00692EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2023/12/19 1:15 p.m.9 views

CVE-2019-25158

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...

9.8CVSS0.00692EPSS
Exploits0References4
OSV
OSV
added 2023/12/19 1:15 p.m.10 views

CVE-2019-25158

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...

9.8CVSS7.9AI score
Exploits0References4
Cvelist
Cvelist
added 2023/12/19 1:0 p.m.13 views

CVE-2019-25158 pedroetb tts-api app.js onSpeechDone os command injection

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...

5.5CVSS10AI score0.00692EPSS
Exploits0References4
CVE
CVE
added 2023/12/19 1:0 p.m.45 views

CVE-2019-25158

CVE-2019-25158 affects pedroetb tts-api up to version 2.1.4. The vulnerability is in the onSpeechDone function of app.js, enabling OS command injection. A fix is available in version 2.2.0, with the patch identified as 29d9c25415911ea2f8b6de247cb5c4607d13d434. Upgrading to 2.2.0 is recommended to...

9.8CVSS7.9AI score0.00692EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder