Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

kde konqueror embedded 0.1 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2003-0592
Konqueror in KDE 3.1.3 and previous versions (kdelibs) allows remote malicious users to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outsi...
Kde Konqueror 2.1.1Kde Konqueror 3.1Kde Konqueror 3.1.1Kde Konqueror 2.2.2Kde Konqueror 3.0Kde Konqueror 3.1.2Kde Konqueror Embedded 0.1Kde Konqueror 3.0.3Kde Konqueror 3.0.5Kde Konqueror 3.0.1Kde Konqueror 3.0.2
7.5
CVSSv2
CVE-2003-0370
Konqueror Embedded and KDE 2.2.2 and previous versions does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote malicious users to spoof certificates via a man-in-the-middle attack.
Apple Safari 1.0Kde Konqueror Embedded 0.1Turbolinux Turbolinux Server 8.0Turbolinux Turbolinux Workstation 8.0Redhat Linux 7.1Redhat Linux 7.2Turbolinux Turbolinux Server 7.0Turbolinux Turbolinux Workstation 7.0Kde Kde
5
CVSSv2
CVE-2003-0459
KDE Konqueror for KDE 3.1.2 and previous versions does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.
Kde Konqueror 3.0Kde Konqueror 3.0.1Kde Konqueror Embedded 0.1Redhat Analog Real-time Synthesizer 2.1.1-5Redhat Kdelibs 3.0.0-10Redhat Kdelibs 3.1-10Redhat Kdelibs Sound 2.1.1-5Redhat Kdelibs Sound 2.2-11Kde Konqueror 3.0.5Kde Konqueror 3.1Redhat Kdebase 3.0.3-13Redhat Kdelibs Devel 2.2-11Redhat Kdelibs Devel 3.0.0-10Redhat Kdelibs Sound Devel 2.2-11Kde Konqueror 3.0.2Kde Konqueror 3.0.3Redhat Analog Real-time Synthesizer 2.2-11Redhat Kdelibs Devel 2.1.1-5Redhat Kdelibs Sound Devel 2.1.1-5Kde Konqueror 2.1.1Kde Konqueror 2.2.2Kde Konqueror 3.1.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook