Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

kde kde 3.0.5b vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-0870
KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote malicious users to steal cookies and conduct unauthorized activities, aka "Cross Security ...
Kde Konqueror 3.0.1Kde Konqueror 3.0.2Kde Konqueror 3.1.3Kde Konqueror 3.1.4Kde Konqueror 2.2.1Kde Konqueror 2.2.2Kde Konqueror 3.0Kde Konqueror 3.1.1Kde Konqueror 3.1.2Kde Konqueror 3.0.3Kde Konqueror 3.0.5Kde Konqueror 3.1.5Kde Konqueror 3.2.1Kde Konqueror 2.1.1Kde Konqueror 2.1.2Kde Konqueror 3.0.5bKde Konqueror 3.1Kde Konqueror 3.2.3
NA
CVE-2003-0692
KDM in KDE 3.1.3 and previous versions uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows malicious users to guess session cookies via brute force methods and gain access to the user session.
Kde Kde 2.0.1Kde Kde 2.0 BetaKde Kde 2.1Kde Kde 3.0.1Kde Kde 3.0.2Kde Kde 3.1Kde Kde 3.1.1Kde Kde 1.1.1Kde Kde 1.1.2Kde Kde 2.2Kde Kde 2.2.1Kde Kde 3.0.4Kde Kde 3.0.5Kde Kde 3.1.3Kde Kde 1.2Kde Kde 2.0Kde Kde 2.2.2Kde Kde 3.0Kde Kde 3.0.5aKde Kde 3.0.5bKde Kde 1.1Kde Kde 2.1.1
NA
CVE-2003-0690
KDM in KDE 3.1.3 and previous versions does not verify whether the pam_setcred function call succeeds, which may allow malicious users to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.
Kde Kde 1.1Kde Kde 1.1.1Kde Kde 2.1.1Kde Kde 2.1.2Kde Kde 3.0.3aKde Kde 3.0.4Kde Kde 3.1.2Kde Kde 3.1.3Kde Kde 2.0Kde Kde 2.0.1Kde Kde 3.0Kde Kde 3.0.1Kde Kde 3.0.5bKde Kde 3.1Kde Kde 2.0 BetaKde Kde 2.1Kde Kde 3.0.2Kde Kde 3.0.3Kde Kde 3.1.1Kde Kde 3.1.1aKde Kde 1.1.2Kde Kde 1.2
NA
CVE-2006-3672
KDE Konqueror 3.5.1 and previous versions allows remote malicious users to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 (zero) argumen...
Kde Konqueror 3.0.2Kde Konqueror 3.0.3Kde Konqueror 3.1.5Kde Konqueror 3.2.1Kde KonquerorKde Konqueror 2.1.1Kde Konqueror 2.1.2Kde Konqueror 3.0.5Kde Konqueror 3.0.5bKde Konqueror 3.2.2Kde Konqueror 3.2.2.6Kde Konqueror 3.0Kde Konqueror 3.0.1Kde Konqueror 3.1.3Kde Konqueror 3.1.4Kde Konqueror 3.3.1Kde Konqueror 3.3.2Kde Konqueror 2.2.1Kde Konqueror 2.2.2Kde Konqueror 3.1Kde Konqueror 3.1.1Kde Konqueror 3.1.2
NA
CVE-2005-4684
Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote malicious users to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, ...
Kde Konqueror 2.2.1Kde Konqueror 2.2.2Kde Konqueror 3.1Kde Konqueror 3.1.1Kde Konqueror 3.1.2Kde Konqueror 3.3Kde Konqueror 0.1Kde Konqueror 3.0.2Kde Konqueror 3.0.3Kde Konqueror 3.1.5Kde Konqueror 3.2.1Kde Konqueror 3.0Kde Konqueror 3.0.1Kde Konqueror 3.1.3Kde Konqueror 3.1.4Kde Konqueror 3.3.2Kde Konqueror 3.3.1Kde Konqueror 2.1.1Kde Konqueror 2.1.2Kde Konqueror 3.0.5Kde Konqueror 3.0.5bKde Konqueror 3.2.2.6
NA
CVE-2004-1158
Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote malicious users to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a ...
Kde Konqueror 2.2.1Kde Konqueror 2.2.2Kde Konqueror 3.0Kde Konqueror 3.1.1Kde Konqueror 3.1.2Kde Konqueror 3.3Kde Konqueror 3.3.1Kde Konqueror 2.1.1Kde Konqueror 2.1.2Kde Konqueror 3.0.5bKde Konqueror 3.1Kde Konqueror 3.2.2.6Kde Konqueror 3.2.3Kde Konqueror 3.0.3Kde Konqueror 3.0.5Kde Konqueror 3.1.5Kde Konqueror 3.2.1Kde Konqueror 3.0.1Kde Konqueror 3.0.2Kde Konqueror 3.1.3Kde Konqueror 3.1.4Kde Konqueror 3.3.2
NA
CVE-2004-0746
Konqueror in KDE 3.2.3 and previous versions allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote malicious users to perform a session fixation attack and hijack a user's HTTP session.
Kde Konqueror 3.0.3Kde Konqueror 3.0.5Kde Konqueror 3.0.5bKde Konqueror 3.2.3Kde Konqueror 3.1Kde Konqueror 3.1.1Kde Konqueror 3.0Kde Konqueror 3.1.2Kde Konqueror 3.1.3Kde Konqueror 3.0.1Kde Konqueror 3.0.2Kde Konqueror 3.1.5Kde Konqueror 3.2.1Mandrakesoft Mandrake Linux 9.2Suse Suse Linux 8.1Gentoo Linux 1.4Kde Kde 3.1.3Suse Suse Linux 8.2Suse Suse Linux 8Kde Kde 3.2Mandrakesoft Mandrake Linux 10.0Suse Suse Linux 9.0
NA
CVE-2004-0866
Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote malicious users to perform a session fixation attack and hijack a user's HTTP session.
Kde Konqueror 3.0.2Kde Konqueror 3.0.3Kde Konqueror 3.1.4Kde Konqueror 3.1.5Kde Konqueror 3.0Kde Konqueror 3.0.1Kde Konqueror 3.1.2Kde Konqueror 3.1.3Mozilla Firefox 0.9.2Kde Konqueror 2.1.1Kde Konqueror 2.1.2Kde Konqueror 3.0.5Kde Konqueror 3.0.5bKde Konqueror 3.2.1Kde Konqueror 3.2.3Microsoft Internet Explorer 6.0Kde Konqueror 2.2.1Kde Konqueror 2.2.2Kde Konqueror 3.1Kde Konqueror 3.1.1Microsoft Ie 6.0Suse Suse Linux 1.0
NA
CVE-2004-0867
Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote malicious users to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported th...
Kde Konqueror 2.2.1Kde Konqueror 2.2.2Kde Konqueror 3.1Kde Konqueror 3.1.1Kde Konqueror 3.1.2Microsoft Ie 6.0Kde Konqueror 2.1.1Kde Konqueror 2.1.2Kde Konqueror 3.0.5Kde Konqueror 3.0.5bKde Konqueror 3.2.3Microsoft Internet Explorer 6.0Kde Konqueror 3.0Kde Konqueror 3.0.1Kde Konqueror 3.1.3Kde Konqueror 3.1.4Mozilla Firefox 0.9.2Kde Konqueror 3.0.2Kde Konqueror 3.0.3Kde Konqueror 3.1.5Kde Konqueror 3.2.1Suse Suse Linux 9.0
NA
CVE-2012-4514
rendering/render_replaced.cpp in Konqueror in KDE prior to 4.9.3 allows remote malicious users to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."
Kde Kde 3.2.1Kde Kde 3.2.3Kde Kde 3.1.1Kde Kde 3.1.2Kde Kde 3.5Kde Kde 3.3.xKde Kde 1.1Kde Kde 4.7.3Kde Kde 2.2Kde Kde 1.xKde Kde 3.5.7Kde Kde 2.0.1Kde Kde 3.0.5Kde Kde 3.1 Beta2Kde Kde 3.0.1Kde Kde 3.0Kde Kde 3.0.2Kde KdeKde Kde 3.1.5Kde Kde 3.1.4Kde Kde 3.2.0Kde Kde 3.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook