Vulnerabilities

TI-2011-02385 CVE-2011-2725 · GHSA-39q3-w6r4-xp9g

Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to…

LOW 35

Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02952 Published 2014-02-04 Will not fix CWE-22

TI-2013-03609 CVE-2013-4132 · GHSA-4vrh-wr8w-rqg2

KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc…

LOW 27

KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pw_encrypt functions, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash)…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02413 Published 2013-09-16 No fix listed CWE-310

TI-2011-02975 CVE-2011-3365 · GHSA-rcm3-37px-2f83

The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier…

LOW 22

The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01073 Published 2011-11-29 Fixed CWE-20

TI-2011-01405 CVE-2011-1586 · GHSA-w8p8-fqqv-v8w8

Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in…

LOW 32

Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote attackers to create arbitrary files via a ..

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.03119 Published 2011-04-27 Fixed CWE-22

TI-2011-01019 CVE-2011-1168 · GHSA-85gj-974c-3vjj

Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in…

LOW 25

Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02673 Published 2011-04-18 Fixed CWE-79

TI-2010-02472 CVE-2010-2575 · GHSA-gp5q-hh2p-748v

Heap-based buffer overflow in the RLE decompression functionality in the…

LOW 38

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04652 Published 2010-08-30 Will not fix CWE-119

TI-2010-01460 CVE-2010-1511 · GHSA-frwp-8f86-7mhx

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation…

LOW 34

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03323 Published 2010-05-17 No fix listed CWE-264

TI-2010-00961 CVE-2010-1000 · GHSA-cjh3-ccvw-7vww

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote…

LOW 33

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.03849 Published 2010-05-17 No fix listed CWE-22

TI-2010-00414 CVE-2010-0436 · GHSA-pq8f-75fc-mgwf

Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through…

LOW 30

Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00279 Published 2010-04-15 Fixed CWE-362

TI-2010-00884 CVE-2010-0923 · GHSA-8jgf-9www-j7x4

Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase…

LOW 30

Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an unattended workstation b…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00281 Published 2010-03-03 No fix listed CWE-362

Vulnerabilities

Filters