[SECURITY] Fedora 36 Update: kernel-6.2.9-100.fc36

The kernel meta package...

AZL-25956 CVE-2023-28464 affecting package kernel for versions less than 5.15.122.1-2

hciconncleanup in net/bluetooth/hciconn.c in the Linux kernel through 6.2.9 has a use-after-free observed in hciconnhashflush because of calls to hcidevput and hciconnput. There is a double free that may lead to privilege escalation...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 6.2.9 and earlier versions. An attacker can exploit the vulnerability to elevate privileges...

PT-2023-2069 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 6.2.9 Description: The issue is related to a use-after-free vulnerability in the hci conn cleanup function in the net/bluetooth/hci conn.c module of the Linux kernel. This vulnerability is observed in the hci con...

CVE-2022-31144 affecting package redis for versions less than 6.2.9-1

CVE-2022-31144 affecting package redis for versions less than 6.2.9-1. This CVE either no longer is or was never applicable...

SUSE CVE-2022-35977

Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted SETRANGE and SORTRO commands can trigger an integer overflow, resulting with Redis attempting to allocate impossible amounts of memory and abort with an out-of-memory OOM panic. The problem is fixe...

CVE-2022-4681

The Hide My WP WordPress plugin before 6.2.9 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

Hide My WP < 6.2.9 - Unauthenticated SQLi

The plugin does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. curl -k --location --request GET "http://localhost:10008" --header "X-Forwarded-For:...

CVE-2021-43205

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiClient for Linux version 7.0.2 and below, 6.4.7 and below and 6.2.9 and below may allow an unauthenticated attacker to access the confighandler webserver via external binaries...

CVE-2021-44169

A improper initialization in Fortinet FortiClient Windows version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, version 7.0.3 and below allows attacker to gain administrative privileges via placing a malicious executable inside the FortiClient installer's directory...

Apple Security Update: watchOS 6.2.9

Apple recommends to install security update watchOS 6.2.9 on devices Apple Watch Series 1 and Apple Watch Series 2...

CVE-2017-4929

VMware NSX Edge 6.2.x before 6.2.9 and 6.3.x before 6.3.5 contains a moderate Cross-Site Scripting XSS issue which may lead to information disclosure...

TYPO3 Multiple Vulnerabilities (TYPO3-CORE-SA-2014-003)

TYPO3 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...

DotNetNuke 6.x < 6.2.9, 7.x < 7.1.1 Redirection Weakness and XSS Vulnerabilities

DotNetNuke is prone to redirection weakness and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WebGUI user profile Unspecified Vulnerability

The remote host is running WebGUI, a content management system from Plain Black Software. According to its banner, the version of this software on the remote is earlier than 6.2.9 and thus affected by an undisclosed remote vulnerability related to the 'user profile' feature. %NASLMINLEVEL 70300 C...