Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

qt qt vulnerabilities and exploits

(subscribe to this query)
3.6
CVSSv2
CVE-2013-0254
The QSharedMemory class in Qt 5.0.0, 4.8.x prior to 4.8.5, 4.7.x prior to 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical prog...
Qt Qt 1.41Qt Qt 1.44Qt Qt 1.45Qt Qt 1.42Qt Qt 1.43Qt Qt 2.0.0Qt Qt 2.0.1Qt Qt 2.0.2Qt Qt 3.3.4Qt Qt 3.3.5Qt Qt 3.3.6Qt Qt 3.3.2Qt Qt 3.3.3Qt Qt 3.3.0Qt Qt 3.3.1Qt Qt 4.1.2Qt Qt 4.1.3Qt Qt 4.1.4Qt Qt 4.1.5Qt Qt 4.1.0Qt Qt 4.1.1Qt Qt 4.0.0
4.3
CVSSv2
CVE-2009-2700
src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle malicious users to spoof arbitrary SSL servers via a cr...
Qt Qt 4.7.3Qt Qt 4.7.2Qt Qt 4.0.0Qt Qt 4.7.4Qt Qt 4.3.4Qt Qt 4.3.5Qt Qt 4.5.0Qt Qt 4.5.1Qt Qt 4.4.2Qt Qt 4.1.2Qt Qt 4.1.1Qt Qt 4.8.2Qt Qt 4.7.1Qt Qt 4.2.0Qt Qt 4.6.0Qt Qt 4.6.1Qt Qt 4.4.0Qt Qt 4.4.3Qt Qt 4.2.1Qt Qt 4.0.1Qt Qt 4.1.3Qt Qt 4.8.1
5
CVSSv2
CVE-2010-2621
The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and previous versions allows remote malicious users to cause a denial of service (infinite loop) via a malformed request.
Qt Qt 4.6.0Qt Qt 4.5.2Qt Qt 4.5.3Qt Qt 4.5.0Qt Qt 4.2.0Qt Qt 4.1.5Qt Qt 4.1.0Qt Qt 4.1.4Digia QtQt Qt 4.6.1Qt Qt 4.4.0Qt Qt 4.4.2Qt Qt 4.3.5Qt Qt 4.2.1Qt Qt 4.1.3Qt Qt 4.1.1Qt Qt 4.3.3Qt Qt 4.3.2Qt Qt 4.3.1Qt Qt 4.3.0Qt Qt 4.0.0Qt Qt 4.6.2
4.3
CVSSv2
CVE-2010-5076
QSslSocket in Qt prior to 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle malicious users to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification ...
Digia QtQt Qt 4.6.3Qt Qt 4.6.2Qt Qt 4.3.1Qt Qt 4.3.0Qt Qt 4.3.4Qt Qt 4.3.5Qt Qt 4.6.0Qt Qt 4.5.2Qt Qt 4.4.3Qt Qt 4.3.2Qt Qt 4.2.3Qt Qt 4.2.0Qt Qt 4.0.1Qt Qt 4.5.0Qt Qt 4.5.1Qt Qt 4.4.0Qt Qt 4.4.1Qt Qt 4.1.0Qt Qt 4.1.4Qt Qt 4.1.3Qt Qt 4.1.2
5
CVSSv2
CVE-2017-15011
The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote malicious users to cause a denial of service (application crash) via an unspecified string.
Qt Qt 5.9.0Qt Qt 5.10.0Qt Qt 5.11.0Qt Qt 5.12.0Qt Qt 5.14.0Qt Qt 5.0.1Qt Qt 5.5.0Qt Qt 5.7.0Qt Qt 5.11.1Qt Qt 5.11.3Qt Qt 5.1.0Qt Qt 5.2.0Qt Qt 5.3.0Qt Qt 5.4.0Qt Qt 5.12.2Qt Qt 5.12.3Qt Qt 5.12.4Qt Qt 5.13.0Qt Qt 5.0.0Qt Qt 5.6.0Qt Qt 5.8.0Qt Qt 5.10.1
4.3
CVSSv2
CVE-2012-5624
The XMLHttpRequest object in Qt prior to 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle malicious users to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application.
Qt Qt 4.2.3Digia QtQt Qt 1.41Qt Qt 1.44Qt Qt 1.45Qt Qt 1.42Qt Qt 1.43Qt Qt 2.0.0Qt Qt 3.3.0Qt Qt 2.0.1Qt Qt 2.0.2Qt Qt 3.3.3Qt Qt 3.3.4Qt Qt 3.3.1Qt Qt 3.3.2Qt Qt 4.0.1Qt Qt 4.1.0Qt Qt 3.3.5Qt Qt 3.3.6Qt Qt 4.1.3Qt Qt 4.1.4Qt Qt 4.1.1
6.8
CVSSv2
CVE-2006-4811
Integer overflow in Qt 3.3 prior to 3.3.7, 4.1 prior to 4.1.5, and 4.2 prior to 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafte...
Qt Qt 3.3.5Qt Qt 3.3.6Qt Qt 3.3.3Qt Qt 3.3.4Qt Qt 4.1.0Qt Qt 4.2.0Qt Qt 3.3.1Qt Qt 3.3.2Qt Qt 4.1.2Qt Qt 4.1.1Redhat Kdelibs 3.1.3Qt Qt 3.3.0Qt Qt 4.1.4Qt Qt 4.1.3
4.3
CVSSv2
CVE-2012-6093
The QSslSocket::sslErrors function in Qt prior to 4.6.5, 4.7.x prior to 4.7.6, 4.8.x prior to 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect erro...
Qt Qt 4.6.0Qt Qt 4.6.3Qt Qt 4.6.4Qt Qt 4.6.1Qt Qt 4.6.2Qt QtQt Qt 4.7.2Qt Qt 4.7.3Qt Qt 4.7.0Qt Qt 4.7.1Qt Qt 4.7.5Qt Qt 4.7.4Qt Qt 4.7.6Qt Qt 4.8.2Qt Qt 4.8.3Qt Qt 4.8.0Qt Qt 4.8.1Qt Qt 4.8.4Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 12.04Opensuse Opensuse 11.4
6.8
CVSSv2
CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt prior to 4.8.7 and 5.x prior to 5.4.2 allow remote malicious users to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
Digia QtQt Qt 5.3.0Qt Qt 5.4.1Qt Qt 5.0.0Qt Qt 5.0.1Qt Qt 5.2.0Qt Qt 5.2.1Qt Qt 5.0.2Qt Qt 5.1.0Fedoraproject Fedora 20Fedoraproject Fedora 21Fedoraproject Fedora 22
6.8
CVSSv2
CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt prior to 4.8.7 and 5.x prior to 5.4.2 allow remote malicious users to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO im...
Fedoraproject Fedora 22Fedoraproject Fedora 20Fedoraproject Fedora 21Digia QtQt Qt 5.0.0Qt Qt 5.4.1Qt Qt 5.2.1Qt Qt 5.3.0Qt Qt 5.1.0Qt Qt 5.2.0Qt Qt 5.0.1Qt Qt 5.0.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook