Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

kde kde sc vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2
CVE-2011-1586
Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and previous versions allows remote malicious users to create arbitrary files via a .. (dot dot) in the name attribute of a file elem...
Kde Kde Sc 4.1.0Kde Kde Sc 4.0.3Kde Kde Sc 4.0.5Kde Kde Sc 4.5.2Kde Kde Sc 4.3.0Kde Kde Sc 4.0.0Kde Kde Sc 4.2.3Kde Kde Sc 4.1.3Kde Kde Sc 4.4.0Kde Kde Sc 4.6Kde Kde Sc 4.5.4Kde Kde Sc 4.2Kde Kde Sc 4.4.1Kde Kde Sc 4.2.2Kde Kde Sc 4.4.2Kde Kde Sc 4.5.5Kde Kde Sc 4.5.1Kde Kde Sc 2.2.0Kde Kde Sc 4.1.2Kde Kde Sc 4.2.1Kde Kde Sc 4.4.3Kde Kde Sc 4.3.5
5.8
CVSSv2
CVE-2010-1000
Directory traversal vulnerability in KGet in KDE SC 4.0.0 up to and including 4.4.3 allows remote malicious users to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
Kde Kde Sc 4.3.0Kde Kde Sc 4.4.0Kde Kde Sc 4.1.80Kde Kde Sc 4.1.85Kde Kde Sc 4.1.1Kde Kde Sc 4.2.2Kde Kde Sc 4.0.0Kde Kde Sc 4.0.4Kde Kde Sc 4.0.5Kde Kde Sc 4.3.4Kde Kde Sc 4.3.5Kde Kde Sc 4.4.2Kde Kde Sc 4.4.3Kde Kde Sc 4.1.3Kde Kde Sc 4.1.2Kde Kde Sc 4.0.2Kde Kde Sc 4.0.3Kde Kde Sc 4.1.0Kde Kde Sc 4.2.4Kde Kde Sc 4.3.2Kde Kde Sc 4.3.3Kde Kde Sc 4.4.1
4.3
CVSSv2
CVE-2011-1168
Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 up to and including 4.6.1 allows remote malicious users to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable w...
Kde Kde Sc 4.5.2Kde Kde Sc 4.4.0Kde Kde Sc 4.6Kde Kde Sc 4.5.4Kde Kde Sc 4.4.1Kde Kde Sc 4.4.2Kde Kde Sc 4.5.5Kde Kde Sc 4.5.1Kde Kde Sc 4.4.3Kde Kde Sc 4.6.1Kde Kde Sc 4.4.4Kde Kde Sc 4.5.3Kde Kde Sc 4.4.5Kde Kde Sc 4.6.0Kde Kde Sc 4.5.0
6.8
CVSSv2
CVE-2010-2575
Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 up to and including 4.5.0 allows remote malicious users to cause a denial of service (application crash) or...
Kde Kde Sc 4.3.0Kde Kde Sc 4.4.1Kde Kde Sc 4.4.2Kde Kde Sc 4.4.3Kde Kde Sc 4.3.5Kde Kde Sc 4.4.0Kde Kde Sc 4.3.3Kde Kde Sc 4.3.4Kde Kde Sc 4.5.0Kde Kde Sc 4.3.1Kde Kde Sc 4.3.2Kde Kde Sc 4.4.4Kde Kde Sc 4.4.5
6.9
CVSSv2
CVE-2010-0436
Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 up to and including 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socke...
Kde Kde Sc 4.3.4Kde Kde Sc 4.3.0Kde Kde Sc 4.2.2Kde Kde Sc 4.4.1Kde Kde Sc 4.3.5Kde Kde Sc 4.3.1Kde Kde Sc 4.4.0Kde Kde Sc 4.4.2Kde Kde Sc 4.1.2Kde Kde Sc 3.5.10Kde Kde Sc 2.2.0
4.3
CVSSv2
CVE-2011-3365
The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 up to and including 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote malicious users to spoof the common name (CN) of a certificate via rich...
Kde Kde Sc 4.6.4Kde Kde Sc 4.7.0Kde Kde Sc 4.6.1Kde Kde Sc 4.7.1Kde Kde Sc 4.6.2Kde Kde Sc 4.6.3Kde Kde Sc 4.6.0Kde Kde Sc 4.6.5
6.8
CVSSv2
CVE-2011-2725
Directory traversal vulnerability in Ark 4.7.x and previous versions allows remote malicious users to delete and force the display of arbitrary files via .. (dot dot) sequences in a zip file.
Kde Kde Sc 4.7.1Kde Kde Sc 4.7.2Kde Kde Sc 4.7.3Kde Kde ScKde ArkKde Kde Sc 4.7.0Opensuse Opensuse 11.4Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.10
5
CVSSv2
CVE-2013-4132
KDE-Workspace 4.10.5 and previous versions does not properly handle the return value of the glibc 2.17 crypt and pw_encrypt functions, which allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via (1) an invalid salt or a (2) DES or (3)...
Kde Kde ScKde Kde-workspaceOpensuse Opensuse 12.2
6.9
CVSSv2
CVE-2010-0923
Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate malicious users to bypass KScreenSaver screen locking and access an unattended workstation by pressing the Enter key at a certain time, related to...
Kde Kde Sc 4.4.0
6.4
CVSSv2
CVE-2010-1511
KGet 2.4.2 in KDE SC 4.0.0 up to and including 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote malicious users to overwrite arbitrary files via a crafted metalink file.
Kde Kget 2.4.2Kde Kde Sc 4.3.5Kde Kde Sc 4.3.4Kde Kde Sc 4.0.1Kde Kde Sc 2.2.0Kde Kde Sc 4.1.0Kde Kde Sc 4.1.80Kde Kde Sc 4.4.3Kde Kde Sc 4.2.3Kde Kde Sc 4.1.1Kde Kde Sc 4.4.0Kde Kde Sc 3.5.10Kde Kde Sc 4.4.1Kde Kde Sc 4.0.0Kde Kde Sc 4.1.96Kde Kde Sc 4.1.85Kde Kde Sc 4.2.1Kde Kde Sc 4.2.0Kde Kde Sc 4.2.4Kde Kde Sc 4.4.2Kde Kde Sc 4.3.0Kde Kde Sc 4.2.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook