USN-7807-1 gst-plugins-base1.0 vulnerabilities

Michael Randrianantenaina discovered that GStreamer Base Plugins did not correctly handle certain integer operations. An attacker could possibly use this issue to execute arbitrary code. CVE-2023-37327, CVE-2024-4453 Michael Randrianantenaina discovered that GStreamer Base Plugins did not correct...

PT-2023-3906 · Mysql Server +7 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.33 and prior Description: The issue is related to errors in processing input data in the MySQL Server product, specifically in the Server: Optimizer component. This can be exploited by a high-privileged attacker with...

CVE-2017-0170

Windows Performance Monitor in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an information disclosure vulnerability due to the way it parses XML input, aka "Window...

Cisco ESA/WSA AMP ClamAV Denial of Service Vulnerability

The Cisco Email Security Appliance is an email security protection solution. A security vulnerability exists in Cisco ESA and WSA AMP ClamAV, stemming from the libclamav library failing to properly parse input files. An attacker can send a constructed document that triggers a scan of the AMP Clam...