26 matches found
ROOT-OS-DEBIAN-12-CVE-2024-36968 CVE-2024-36968 in rootio-linux - Patched by Root
Root has patched CVE-2024-36968 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-36968 CVE-2024-36968 in rootio-linux - Patched by Root
Root has patched CVE-2024-36968 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...
CVE-2020-36968 M/Monit 3.7.4 - Password Disclosure
M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retrieve user password hashes through an administrative API endpoint. Attackers can send requests to the /api/1/admin/users/list and /api/1/admin/users/get endpoints to extract MD5 password hashes for al...
CVE-2020-36968
Removed by vendor...
Linux Distros Unpatched Vulnerability : CVE-2020-36968
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retrieve user password hashes through an administrative API...
Azure Linux 3.0 Security Update: kernel (CVE-2024-36968)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36968 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in...
MiracleLinux 9 : kernel-5.14.0-570.12.1.el9_6 (AXSA:2025-10392:38)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10392:38 advisory. kernel: drm: nv04: Fix out of bounds access CVE-2024-27008 kernel: Bluetooth: Fix use-after-free bugs caused by scosocktimeout CVE-2024-27398 kerne...
CVE-2024-36968
creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
CVE-2022-36968
In Progress WSFTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery CSRF attacks...
SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:4314-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4314-1 advisory. The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were...
SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:4316-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4316-1 advisory. The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following securit...
CVE-2024-36968 affecting package kernel for versions less than 6.6.35.1-5
CVE-2024-36968 affecting package kernel for versions less than 6.6.35.1-5. An upgraded version of the package is available that resolves this issue...
CVE-2024-36968
in linux kernel bluetooth L2CAP, l2capleflowctlinit can cause both div-by-zero and an integer overflow since hdev-lemtu may not fall in the valid range...
BELL-CVE-2024-36968
Bulletin has no description...
CVE-2024-36968 Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in l2capleflowctlinit l2capleflowctlinit can cause both div-by-zero and an integer overflow since hdev-lemtu may not fall in the valid range. Move MTU from hcidev to hciconn to validate MTU and...
CVE-2024-36968
CVE-2024-36968 (Linux kernel) : A Bluetooth L2CAP issue in the kernel could cause div-by-zero and integer overflow due to hdev->le_mtu potentially being out of range. The fix moves MTU validation from hci_dev to hci_conn, halting connection setup when MTU is invalid, and adds validation in rea...
CVE-2023-36968
CVE-2023-36968 affects the Food Ordering System v1.0. The root cause is lack of validation of the id parameter against SQL statements, enabling SQL injection. The vulnerability could allow an attacker to execute arbitrary SQL commands on the database (impact on confidentiality, integrity, and ava...
CVE-2022-36968
creationtimestamp| type| source ---|---|--- 2022-08-03 02:18:08+00:00| seen| https://t.me/cibsecurity/47450...
CVE-2022-36968
In Progress WSFTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery CSRF attacks...
CVE-2022-36968
Progress WS_FTP Server prior to version 8.7.3 is affected by a CSRF vulnerability due to admin forms lacking a nonce. The issue is tied to the web administration interface and could enable cross-site request forgery. Affected products: WS_FTP Server