CVE-2010-1000
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers...
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
- Record
CVE-2010-1000- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
- Record
CVE-2010-1000- Updated
- 2026-11-02
EUVDEUVD-2010-1033 No score
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
- Record
EUVD-2010-1033- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cjh3-ccvw-7vww No score
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers...
Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
- Record
GHSA-cjh3-ccvw-7vww- Weakness
- CWE-22
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10325-1 No score
kdenetwork4-filesharing-16.12.0-1.1 on GA media
These are all security issues fixed in the kdenetwork4-filesharing-16.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10325-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10891-1 No score
kdenetwork-filesharing-21.08.1-1.2 on GA media
These are all security issues fixed in the kdenetwork-filesharing-21.08.1-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10891-1- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1000 is a medium vulnerability (CVSS 5.8) in Kde Sc, published May 17, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.85%, the 90th percentile. No source names a fixed version.
References
securityfocus.com/bid/40141
ubuntu.com/usn/USN-938-1
vupen.com/english/advisories/2011/1101
secunia.com/advisories/42423
Show 18 moreShow less
mandriva.com/security/advisories?name=MDVSA-2010:098
exchange.xforce.ibmcloud.com/vulnerabilities/58628
kde.org/info/security/advisory-20100513-1.txt
lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
marc.info?l=oss-security&m=127378789518426&w=2
securitytracker.com/id?1023984
lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
osvdb.org/64690
nvd.nist.gov/vuln/detail/CVE-2010-1000
github.com/advisories/GHSA-cjh3-ccvw-7vww
suse.com/security/cve/CVE-2010-1000