application management tools Flatpak Path Traversal

The vulnerability of the application management tool and Flatpak environments is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to gain access to delete any files they desire...

App Component Data Compromise

The vulnerability of the App tool component for managing applications and Flatpak environments is related to the elevation and concealment of permissions. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

ioctl Component DoS

The vulnerability of the ioctl device for application and Flatpak environments relates to the copying of text from the virtual console and its insertion into the command buffer, from which commands can be executed after the Flatpak application is closed. Exploiting this vulnerability could allow ...

application management tools and Data Compromise

The vulnerability of the application and Flatpak environment management tools is related to the absence of blocking in the seccomp filter for system calls related to mounting. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...

File Forwarding Tool Confidential Data Compromise

The vulnerability of the File Forwarding tool in application management and Flatpak environments is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and compromise its integrity...

application management tools Flatpak File Descriptor Modification

The vulnerability of the application management tool and the Flatpak environment is related to errors in processing file descriptors. Exploiting this vulnerability allows an attacker to modify arbitrary executable files on the host by executing the “applyextra” script...

secomp RCE

The vulnerability of the secomp component in application management tools and Flatpak environments is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...