Vulnerability & Exploit Database

Jenkins Advisory 2022-01-12: CVE-2022-20617: OS command execution vulnerability in Docker Commons Plugin

Jenkins Advisory 2022-01-12: CVE-2022-20616: Missing permission check in Credentials Binding Plugin allows validating secret file credentials IDs

Oracle Linux: CVE-2021-43860: ELSA-2022-1792: flatpak security and bug fix update (MODERATE) (Multiple Advisories)

CentOS Linux: CVE-2021-43860: Moderate: flatpak security and bug fix update (CESA-2022:1792)

Red Hat: CVE-2021-43860: CVE-2021-43860 flatpak: Permissions granted to applications can be hidden from the user at install time (Multiple Advisories)

Rocky Linux: CVE-2021-43860: flatpak (RLSA-2022-1792)

Amazon Linux AMI 2: CVE-2021-43860: Security patch for flatpak (ALAS-2024-2518)

Alpine Linux: CVE-2021-43860: Incorrect Default Permissions

SUSE: CVE-2021-43860: SUSE Linux Security Advisory

Gentoo Linux: CVE-2021-43860: Flatpak: Multiple Vulnerabilities

Alma Linux: CVE-2021-43860: Moderate: flatpak security and bug fix update (ALSA-2022-1792)

Red Hat OpenShift: CVE-2022-20617: jenkins-2-plugins/docker-commons: does not sanitize the name of an image or a tag which could result in an OS command execution

Debian: CVE-2021-43860: flatpak -- security update

Security Advisory 0071

Ubuntu: (Multiple Advisories) (CVE-2021-4204): Linux kernel (OEM) vulnerabilities

Security Advisory 0071

Oracle Linux: CVE-2021-4204: ELSA-2024-3138: kernel security, bug fix, and enhancement update (MODERATE) (Multiple Advisories)

FreeBSD: VID-43F84437-73AB-11EC-A587-001B217B3468 (CVE-2022-0124): Gitlab -- Multiple Vulnerabilities

Security Advisory 0071

Microsoft Windows: CVE-2021-22947: Open Source Curl Remote Code Execution Vulnerability