Lucene search
+L

573 matches found

OSV
OSV
added 2021/11/09 7:24 p.m.15 views

ALBA-2021:4533 ibus bug fix update

The Intelligent Input Bus IBus is an input method framework for multilingual input in Unix-like operating systems. Bug fix: Previously, in GNOME Wayland desktop in AlmaLinux 8.5, the IBus emoji candidate pop-up was used with IBus UI and the selected candidate could not inserted into the target...

7.1AI score
SaveExploits0References1
Rockylinux
Rockylinux
added 2021/11/09 8:47 a.m.16 views

mesa and related packages bug fix and enhancement update

An update is available for xorg-x11-server-Xwayland, libepoxy, wayland, wayland-protocols, libdrm, xorg-x11-server, egl-wayland. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

1.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/11/01 12:00 a.m.22 views

openSUSE 15 Security Update : flatpak (openSUSE-SU-2021:1400-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1400-1 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatp...

8.8CVSS6.9AI score0.00436EPSS
SaveExploits0References4
OSV
OSV
added 2021/10/30 11:04 a.m.11 views

OESA-2021-1404 flatpak security update

flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. Security Fixes: In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-...

7.8CVSS7AI score0.00436EPSS
SaveExploits0References2
Mageia
Mageia
added 2021/10/23 10:05 a.m.42 views

Updated flatpak packages fix security vulnerability

Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services into treating the Flatpak app as though it was an ordinary, non-sandboxed host-OS process, by manipulating the VFS using recent mount-related...

8.8CVSS0.6AI score0.00436EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/10/21 12:00 a.m.33 views

openSUSE 15 Security Update : flatpak (openSUSE-SU-2021:3472-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3472-1 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatp...

8.8CVSS6.9AI score0.00436EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/10/14 12:00 a.m.23 views

Debian DSA-4984-1 : flatpak - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-4984 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct...

8.8CVSS6.9AI score0.00436EPSS
SaveExploits0References6
CNVD
CNVD
added 2021/10/11 12:00 a.m.44 views

Flatpak input validation error vulnerability

Flatpak is a suite of application virtualization systems for Linux desktop application computing environments. versions prior to Flatpak 1.12.0 and 1.10.4 contain an input validation error vulnerability that stems from direct access to AFUNIX sockets such as those used by Wayland, Pipewire or...

8.8CVSS1.1AI score0.00436EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2021/10/08 2:15 p.m.31 views

CVE-2021-41133

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services int...

8.8CVSS6.8AI score0.00436EPSS
SaveExploits0References3
Prion
Prion
added 2021/10/08 2:15 p.m.27 views

Code injection

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services int...

4.6CVSS6.3AI score0.00436EPSS
SaveExploits0References14Affected Software3
OSV
OSV
added 2021/10/08 2:15 p.m.7 views

UBUNTU-CVE-2021-41133

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services int...

8.8CVSS6.8AI score0.00436EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/10/08 12:00 a.m.41 views

CVE-2021-41133 Sandbox bypass via recent VFS-manipulating syscalls

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services int...

8.8CVSS7.2AI score0.00436EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2021/10/08 12:00 a.m.5 views

Flatpak 安全漏洞

Flatpak is a suite of application virtualization systems for Linux desktop application computing environments. versions prior to Flatpak 1.12.0 and 1.10.4 contain an input validation error vulnerability that stems from direct access to AFUNIX sockets such as those used by Wayland, Pipewire or...

8.8CVSS6.7AI score0.00436EPSS
SaveExploits0References32
Vulnrichment
Vulnrichment
added 2021/10/08 12:00 a.m.28 views

CVE-2021-41133 Sandbox bypass via recent VFS-manipulating syscalls

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services int...

8.8CVSS8.7AI score0.00436EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2021/07/30 12:00 a.m.8 views

PT-2021-8110 · Xwayland +9 · Xwayland +9

Name of the Vulnerable Software and Affected Versions: Wayland affected versions not specified Description: The issue is related to an integer overflow in the reference count of the buffer pool. This can occur when a large number of wl shm buffer objects are created or when the server is coerced...

6.6CVSS6.6AI score0.00306EPSS
SaveExploits1References53
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2019:0527-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS6.7AI score0.00504EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2018:3625-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.03086EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/06/01 12:00 a.m.25 views

FreeBSD : wayland -- integer overflow (fd24a530-c202-11eb-b217-b42e99639323)

Tobias Stoeckmann reports : The libXcursor fix for CVE-2013-2003 has never been imported into wayland, leaving it vulnerable to it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyrigh...

6.8CVSS8.1AI score0.02127EPSS
SaveExploits0References4
Oracle linux
Oracle linux
added 2021/05/25 12:00 a.m.66 views

spice-vdagent security and bug fix update

0.20.0-3 - Fix mouse problems in multi-monitor environments under Wayland Resolves: rhbz1790904 rhbz1824610 0.20.0-2 - Resolves: CVE-2020-25650, CVE-2020-25651, CVE-2020-25652, CVE-2020-25653...

6.4CVSS2.1AI score0.00496EPSS
SaveExploits4
Oracle linux
Oracle linux
added 2021/05/25 12:00 a.m.56 views

userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update

egl-wayland 1.1.5-3 - Add upstream patch to address rhbz1842473 1.1.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora33MassRebuild 1.1.5-1 - Update to 1.1.5 libdrm 2.4.103-1 - Update to 2.4.103 libglvnd 1.3.2-1 - Update to 1.3.2 release libinput 1.16.3-1 - libinput 1.16.3 1886648 libwacom...

7.8CVSS7.7AI score0.00629EPSS
SaveExploits1
Rows per page
Query Builder