2023-08 Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 for x64 (KB5029651)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

August 8, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 (KB5029651)

August 8, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 KB5029651 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framewo...

August 8, 2023—KB5029295 (Monthly Rollup)

None None...

August 8, 2023—KB5029296 (Monthly Rollup)

None None...

August 8, 2023—KB5029308 (Security-only update)

None None...

August 8, 2023—KB5029312 (Monthly Rollup)

None None...

SMM Memory Corruption Vulnerability

Bulletin ID: AMD-SB-4003 Potential Impact: Arbitrary Code Execution Severity: High Summary SMM memory corruption vulnerability in SMM driver on some AMD Processors. CVE-2023-20555 Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an...

Code Injection

wix-embedded-mysql is vulnerable to Code Injection. The vulnerability exists because the apply function of Setup.java as does not properly check if the argument is a Mysql executable, allowing an attacker to inject and execute malicious code...

PT-2023-9275 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Description: The issue is related to information disclosure while handling SA query action frame. It is also described as a buffer overflow operation in the memory of...

GHSA-FX3V-4W3W-WPWR Code injection in wix-embedded-mysql

wix-embedded-mysql v4.6.2 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

Code injection in wix-embedded-mysql

wix-embedded-mysql v4.6.2 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument...

com.github.michaelruocco.mysql:embedded-mysql-plugin (>=0.1.0, <=0.4.0), com.github.michaelruocco:embedded-mysql-plugin (1.0.0) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (1.0.2)

com.wix:wix-embedded-mysql MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco.mysql:embedded-mysql-plugin =0.1.0, =0.4.0 -...

com.github.michaelruocco:embedded-mysql-plugin (2.0.0) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (1.0.3)

com.wix:wix-embedded-mysql MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin 2.0.0 Source cves: CVE-2023-39021 Source advisory:...

com.github.michaelruocco:embedded-mysql-plugin (>=2.0.1, <=2.0.2) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.0.0)

com.wix:wix-embedded-mysql MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin =2.0.1, =2.0.2 Source cves: CVE-2023-39021 Source advisory:...

com.github.michaelruocco:embedded-mysql-plugin (2.1.2) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.0.1)

com.wix:wix-embedded-mysql MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin 2.1.2 Source cves: CVE-2023-39021 Source advisory:...

com.github.michaelruocco:embedded-mysql-plugin (2.1.3) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.0.3)

com.wix:wix-embedded-mysql MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin 2.1.3 Source cves: CVE-2023-39021 Source advisory:...

com.github.michaelruocco.embedded-mysql-plugin:com.github.michaelruocco.embedded-mysql-plugin.gradle.plugin (2.1.5), com.github.michaelruocco:com.github.michaelruocco.gradle.plugin (2.1.5) +3 more potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.1.2)

com.wix:wix-embedded-mysql MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco.embedded-mysql-plugin:com.github.michaelruocco.embedded-mysql-plugin.gradle.plugin...

com.wix:wix-embedded-mysql-download-and-extract (2.2.9) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.2.9)

com.wix:wix-embedded-mysql MAVEN version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 2.2.9 Source cves: CVE-2023-39021 Source advisory:...

com.wix:wix-embedded-mysql-download-and-extract (2.2.10) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (2.2.10)

com.wix:wix-embedded-mysql MAVEN version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.wix:wix-embedded-mysql-download-and-extract 2.2.10 Source cves: CVE-2023-39021 Source advisory:...

com.github.michaelruocco:embedded-mysql-plugin (2.1.6), com.wix:wix-embedded-mysql-download-and-extract (3.0.0) potentially affected by CVE-2023-39021 via com.wix:wix-embedded-mysql (3.0.0)

com.wix:wix-embedded-mysql MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.wix:wix-embedded-mysql and may be impacted: - com.github.michaelruocco:embedded-mysql-plugin 2.1.6 - com.wix:wix-embedded-mysql-download-and-extract 3.0....