26 matches found
ROOT-OS-DEBIAN-12-CVE-2024-36968 CVE-2024-36968 in linux - Patched by Root
Root has patched CVE-2024-36968 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-36968 CVE-2024-36968 in linux - Patched by Root
Root has patched CVE-2024-36968 in the linux package for Root:Debian:11. Multiple fixed versions available...
CVE-2020-36968 M/Monit 3.7.4 - Password Disclosure
M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retrieve user password hashes through an administrative API endpoint. Attackers can send requests to the /api/1/admin/users/list and /api/1/admin/users/get endpoints to extract MD5 password hashes for al...
CVE-2020-36968
Removed by vendor...
Linux Distros Unpatched Vulnerability : CVE-2020-36968
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retrieve user password hashes through an administrative API...
Azure Linux 3.0 Security Update: kernel (CVE-2024-36968)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36968 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in...
MiracleLinux 9 : kernel-5.14.0-570.12.1.el9_6 (AXSA:2025-10392:38)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10392:38 advisory. kernel: drm: nv04: Fix out of bounds access CVE-2024-27008 kernel: Bluetooth: Fix use-after-free bugs caused by scosocktimeout CVE-2024-27398 kerne...
CVE-2024-36968
creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
CVE-2022-36968
In Progress WSFTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery CSRF attacks...
SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2024:4316-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4316-1 advisory. The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following securit...
SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2024:4314-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4314-1 advisory. The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were...
CVE-2024-36968 affecting package kernel for versions less than 6.6.35.1-5
CVE-2024-36968 affecting package kernel for versions less than 6.6.35.1-5. An upgraded version of the package is available that resolves this issue...
CVE-2024-36968
in linux kernel bluetooth L2CAP, l2capleflowctlinit can cause both div-by-zero and an integer overflow since hdev-lemtu may not fall in the valid range...
BELL-CVE-2024-36968
Bulletin has no description...
CVE-2024-36968 Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in l2capleflowctlinit l2capleflowctlinit can cause both div-by-zero and an integer overflow since hdev-lemtu may not fall in the valid range. Move MTU from hcidev to hciconn to validate MTU and...
CVE-2024-36968
The CVE-2024-36968 entry concerns the Linux kernel Bluetooth L2CAP path. Concrete details across connected docs show: the vulnerability arises in l2cap_le_flowctl_init() where MTU validation could fail, allowing division by zero and an integer overflow when hdev->le_mtu is out of the valid ran...
CVE-2023-36968
CVE-2023-36968 affects the Food Ordering System v1.0. The root cause is lack of validation of the id parameter against SQL statements, enabling SQL injection. The vulnerability could allow an attacker to execute arbitrary SQL commands on the database (impact on confidentiality, integrity, and ava...
CVE-2022-36968
creationtimestamp| type| source ---|---|--- 2022-08-03 02:18:08+00:00| seen| https://t.me/cibsecurity/47450...
CVE-2022-36968
In Progress WSFTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery CSRF attacks...
CVE-2022-36968
Progress WS_FTP Server prior to version 8.7.3 is affected by a CSRF vulnerability due to admin forms lacking a nonce. The issue is tied to the web administration interface and could enable cross-site request forgery. Affected products: WS_FTP Server