CVE-2026-107313

A flaw was found in the PostgreSQL JDBC Driver pgjdbc. When Generic Security Services GSS encryption is enabled, transmitting large data values can cause the driver to send stale buffer contents instead of the intended payload. Consequently, sensitive data from earlier queries on the same...

CVE-2017-14603

In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet validation could allow reading stale buffer contents and when combined with the "nat" and "symmetricrtp" options allow...

Asterisk Information Disclosure Vulnerability

Asterisk is a free software, open source software that implements the functionality of a telephone user switch PBX. Asterisk suffers from an information disclosure vulnerability that stems from insufficient RTCP packet validation, which allows an attacker to exploit the vulnerability to read the...

PT-2017-13574

Name of the Vulnerable Software and Affected Versions Asterisk versions 11.x through 11.25.2 Asterisk versions 13.x through 13.17.1 Asterisk versions 14.x through 14.6.1 Certified Asterisk versions 11.x through 11.6-cert17 Certified Asterisk versions 13.x through 13.13-cert5 Description The issue...