Moderate: Red Hat Security Advisory: grub2 security update

An update for grub2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2022-2601 affecting package grub2 for versions less than 2.06-14

CVE-2022-2601 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...

Malicious code in wlwz-2312-2601 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1faaec11f2c484475d00298d7584d47dc2b165ca5c8d269739e5150730f918ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-405 Malicious code in wlwz-2312-2601 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1faaec11f2c484475d00298d7584d47dc2b165ca5c8d269739e5150730f918ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rocky Linux 8 : grub2 (RLSA-2023:0049)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0049 advisory. - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the maxglyphsize value,...

BELL-CVE-2022-2601 CVE-2022-2601 does not affect BellSoft software

Bulletin has no description...

WordPress WP Brutal AI Cross Site Request Forgery / SQL Injection

Tittle: WordPress Plugin WP Brutal AI 2.0.0 - SQL Injection via CSRF References: CVE-2023-2601 Author: Taurus Omar Description: The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin via CSRF. Affects Plugin...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Linux Kernel Buffer overflow and denial of service vulnerabilities( CVE-2022-2601, CVE-2022-3775)

Summary Potential Linux Kernel Buffer overflow and denial of service vulnerabilities CVE-2022-2601, CVE-2022-3775 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2022-2601 DESCRIPTION...

CVE-2023-2601

The wpbrutalai WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin via CSRF...

CVE-2023-2601

The wpbrutalai WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin via CSRF...

CVE-2023-2601 WP Brutal AI < 2.0.0 - SQL Injection via CSRF

The wpbrutalai WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin via CSRF...

CVE-2023-2601 WP Brutal AI < 2.0.0 - SQL Injection via CSRF

The wpbrutalai WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin via CSRF...

CVE-2023-2601

CVE-2023-2601 concerns the WordPress plugin WP Brutal AI prior to version 2.0.0, which is vulnerable to a SQL injection due to improper sanitisation/escaping of a parameter before it is used in an SQL statement. The vulnerability is exploitable by an administrator via CSRF, enabling potential una...

EulerOS Virtualization 3.0.6.0 : grub2 (EulerOS-SA-2023-2239)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the...

Oracle Linux 9 : grub2 (ELSA-2023-0752)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0752 advisory. - Fix CVE-2022-3775 Orabug: 34871953 - Resolves: CVE-2022-2601 Tenable has extracted the preceding description block directly from the Oracle Linux...

grub2 security update

2.06-46.0.4.el91.3 - Bump SBAT metadata for grub to 3 Orabug: 34872719 - Fix CVE-2022-3775 Orabug: 34871953 - Enable signing for aarch64 EFI - Fix signing certificate names - Enable back btrfs grub module for EFI pre-built image Orabug: 34360986 - Replaced bugzilla.oracle.com references Orabug:...

WordPress WP Brutal AI Plugin < 2.0.0 is vulnerable to SQL Injection

Software WP Brutal AI Type Plugin Vulnerable versions 2.0.0 Fixed in 2.0.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2601 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID f38258806195 Credits Taurus Omar Required privilege Administrator Published ...

EulerOS Virtualization 2.9.0 : grub2 (EulerOS-SA-2023-1670)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the...

Amazon Linux 2023 : grub2-common, grub2-efi-aa64, grub2-efi-aa64-cdboot (ALAS2023-2023-020)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-020 advisory. A flaw was found in grub 2, where a crafted 16-bit grayscale PNG image may lead to an out-of-bounds write. This flaw allows an attacker to corrupt the data on the heap portion of the grub2's...

CBL Mariner 2.0 Security Update: grub2 (CVE-2022-2601)

The version of grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2601 advisory. - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow wh...