Skip to content
Kde Konqueror vulnerabilities
-
kde, kde konqueror, redhat enterprise linux +3 more +5 more
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to...
CVE-2012-4512
Public exploit
EPSS 11.7%
8.8 High
-
kde konqueror
KDE Konqueror allows remote attackers to cause a denial of service (memory consumption) via a...
CVE-2009-2537
4.3 Medium
-
kde konqueror
The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service ...
CVE-2008-5712
Public exploit
5.0 Medium
-
kde konqueror
HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to...
CVE-2008-5698
Public exploit
4.3 Medium
-
kde konqueror
Konqueror in KDE 3.5.9 allows remote attackers to cause a denial of service (application crash)...
CVE-2008-4382
5.0 Medium
-
kde konqueror
KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of...
CVE-2007-6591
4.3 Medium
-
kde konqueror
KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via...
CVE-2007-6000
Public exploit
5.0 Medium
-
kde konqueror
Unspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a...
CVE-2007-4229
Public exploit
4.3 Medium
-
kde konqueror
Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL...
CVE-2007-4225
6.8 Medium
-
kde konqueror
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval...
CVE-2007-4224
4.3 Medium
-
kde konqueror
konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme...
CVE-2007-3820
2.6 Low
-
kde konqueror
Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address...
CVE-2007-3143
6.4 Medium
-
kde konqueror
Konqueror 3.5.5 release 45.4 allows remote attackers to cause a denial of service (browser crash...
CVE-2007-2164
5.0 Medium
-
kde konqueror
Konqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript...
CVE-2007-1565
7.8 High
-
kde konqueror
The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to...
CVE-2007-1564
Public exploit
6.8 Medium
-
kde konqueror
ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote...
CVE-2007-1308
Public exploit
4.3 Medium
-
kde konqueror
The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments...
CVE-2007-0537
2.6 Low
-
kde konqueror
KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application...
CVE-2006-3672
Public exploit
2.6 Low
-
kde konqueror
Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root...
CVE-2005-4684
6.4 Medium
-
kde, kde konqueror +1 more
The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote...
CVE-2005-0237
5.0 Medium
-
kde konqueror, kdelibs +1 more
Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that...
CVE-2004-1165
Public exploitFix available
7.5 High
-
kde konqueror, mandrakesoft mandrake linux, redhat fedora core +2 more
Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof...
CVE-2004-1158
7.5 High
-
microsoft ie, mozilla firefox, kde konqueror +2 more +4 more
Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains,...
CVE-2004-0867
EPSS 17.2%
7.5 High
-
kde konqueror
KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also...
CVE-2004-0870
5.0 Medium
-
microsoft ie, internet explorer, kde konqueror +2 more +4 more
Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains,...
CVE-2004-0866
EPSS 10.1%
7.5 High
-
kde, kde konqueror, gentoo linux +1 more +3 more
Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level...
CVE-2004-0746
7.5 High
-
kde konqueror
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one...
CVE-2004-0721
7.5 High
-
kde konqueror
KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar...
CVE-2004-0527
Public exploit
5.0 Medium
-
kde konqueror
The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters...
CVE-2004-0411
Fix available
7.5 High
-
kde konqueror, konqueror embedded +1 more
Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie...
CVE-2003-0592
Fix available
7.5 High
-
kde konqueror
Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web...
CVE-2003-1478
Public exploit
4.3 Medium
-
kde konqueror, konqueror embedded, redhat analog real-time synthesizer +5 more +7 more
KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of...
CVE-2003-0459
5.0 Medium
-
kde, kde konqueror embedded, apple safari +3 more +5 more
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X...
CVE-2003-0370
7.5 High
-
apple safari, kde konqueror embedded +1 more
Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509...
CVE-2003-0355
5.0 Medium
-
kde, kde konqueror +1 more
The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not...
CVE-2002-1151
Fix available
7.5 High
-
kde, kde konqueror +1 more
The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints...
CVE-2002-0970
Fix available
7.5 High