CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1870 matches found

OpenVAS•added 2021/01/16 12:00 a.m.•10 views

Fedora: Security Advisory for flatpak (FEDORA-2021-f970ea9d79)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score

SaveExploits0References2

OpenVAS•added 2021/01/16 12:00 a.m.•20 views

Debian: Security Advisory (DSA-4830-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.00595EPSS

SaveExploits0References4

Veracode•added 2021/01/15 8:36 p.m.•32 views

Remote Code Execution (RCE)

Flatpak is vulnerable to remote code execution. The vulnerability exist because of a bug in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape...

8.8CVSS3.8AI score0.00595EPSS

SaveExploits0References13Affected Software3

Tenable Nessus•added 2021/01/15 12:00 a.m.•40 views

Debian DSA-4830-1 : flatpak - security update

Simon McVittie discovered a bug in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. The Flatpak portal D-Bus service flatpak-portal, also known by its D-Bus service name org.freedesktop.portal.Flatpak allows apps in a...

8.8CVSS8.4AI score0.00595EPSS

SaveExploits0References4

osv_cve•added 2021/01/14 8:15 p.m.•50 views

CVE-2021-21261

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. This sandbox-escape bug is present in versio...

8.8CVSS8.9AI score

SaveExploits0References8

osv_debian•added 2021/01/14 8:15 p.m.•8 views

DEBIAN-CVE-2021-21261

8.8CVSS8.6AI score0.00595EPSS

SaveExploits0References1

NVD•added 2021/01/14 8:15 p.m.•29 views

CVE-2021-21261

8.8CVSS8.3AI score0.00595EPSS

SaveExploits0References8

UbuntuCve•added 2021/01/14 8:15 p.m.•39 views

CVE-2021-21261

8.8CVSS7.5AI score0.00595EPSS

SaveExploits0References3

Prion•added 2021/01/14 8:15 p.m.•35 views

Code injection

7.2CVSS8.8AI score0.00595EPSS

SaveExploits0References8Affected Software2

osv_ubuntu•added 2021/01/14 8:15 p.m.•12 views

UBUNTU-CVE-2021-21261

8.8CVSS7.6AI score0.00595EPSS

SaveExploits0References4

attackerkb•added 2021/01/14 8:15 p.m.•15 views

CVE-2021-21261

8.8CVSS7.6AI score0.00595EPSS

SaveExploits0References13Affected Software1

Mend•added 2021/01/14 7:40 p.m.•3 views

CVE-2021-21261

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the "flatpak-portal" service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. This sandbox-escape bug is present in...

8.8CVSS0.00595EPSS

SaveExploits0References16

CVE•added 2021/01/14 7:40 p.m.•346 views

CVE-2021-21261

CVE-2021-21261 is a sandbox-escape flaw in the Flatpak portal (flatpak-portal) that, in vulnerable versions prior to 1.8.5 and 1.10.0, passes caller-specified environment variables to host non-sandboxed processes launched via flatpak run. This can enable a malicious or compromised Flatpak app to ...

8.8CVSS8.3AI score0.00595EPSS

SaveExploits0References8Affected Software1

Cvelist•added 2021/01/14 7:40 p.m.•42 views

CVE-2021-21261 Flatpak sandbox escape via spawn portal

7.3CVSS9.1AI score0.00595EPSS

SaveExploits0References8

AlpineLinux•added 2021/01/14 7:40 p.m.•62 views

CVE-2021-21261

8.8CVSS8.4AI score0.00595EPSS

SaveExploits0

Debian CVE•added 2021/01/14 7:40 p.m.•30 views

CVE-2021-21261

8.8CVSS9AI score0.00595EPSS

SaveExploits0

Debian•added 2021/01/14 7:16 p.m.•58 views

[SECURITY] [DSA 4830-1] flatpak security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4830-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 14, 2021 https://www.debian.org/security/faq -...

7.8AI score

SaveExploits0

Rapid7 Vulnerability Database (full)•added 2021/01/14 12:00 a.m.•5 views

CVE-2021-21261: Improper Neutralization of Special Elements in Output Used by a Downstream Component

8.8CVSS6.5AI score0.00595EPSS

SaveExploits0References2

Positive Technologies•added 2021/01/14 12:00 a.m.•3 views

PT-2021-14370

Name of the Vulnerable Software and Affected Versions: Flatpak versions 0.11.4 through 1.8.4 Flatpak versions 1.9.0 through 1.9.3 Description: A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system. The Flatpak portal...

8.8CVSS6.7AI score0.00595EPSS

SaveExploits0References65

CNNVD•added 2021/01/14 12:00 a.m.•18 views

Flatpak 注入漏洞

Flatpak is an application virtualization system for Linux desktop application computer environments. Flatpak suffers from an injection vulnerability that stems from the fact that flatpak-portal allows sandboxed applications to execute arbitrary code on the host system sandbox escape. No detailed...

8.8CVSS7.7AI score0.00595EPSS

SaveExploits0References22

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by