Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Kde

Kde vulnerabilities

Products

Kde66
Konqueror34
Kmail11
Sc10
Koffice9
Kdelibs8
Kpdf8
Ark7
Plasma-workspace7
Kdegraphics6
K-mail5
Kde-workspace4
Konqueror Embedded4
Kauth3
Applications3
Kdeconnect3
Kword3
Messagelib3
Dolphin2
Kio-extras2
Kmplayer2
Ktexteditor2
Kvt2
Okular2
Paste Applet2
Trojita2

Newest

Known exploitedIn KEVPublic exploitFix available

kde, xpdf, easy software products cups +2 moreBuffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that...CVE-2004-1125Fix available9.3 HighDecember 22, 2004
kde, mandrakesoft mandrake linux, redhat fedora core +2 moreKDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the...CVE-2004-11712.1 LowDecember 10, 2004
kde konqueror, kdelibs +1 moreKonqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that...CVE-2004-1165Public exploitFix available7.5 HighDecember 10, 2004
kde konqueror, mandrakesoft mandrake linux, redhat fedora core +2 moreKonqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof...CVE-2004-11587.5 HighDecember 10, 2004
easy software products cups, xpdf, debian linux +10 more +12 moreMultiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow...CVE-2004-0889Fix available10.0 HighOctober 26, 2004
easy software products cups, gnome gpdf, kde +10 more +12 moreMultiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as...CVE-2004-0888Fix available10.0 HighOctober 21, 2004
libtiff, apple mac os x, mac os x server +10 more +12 moreMultiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial...CVE-2004-0886Fix available5.0 MediumOctober 15, 2004
libtiff, apple mac os x, mac os x server +10 more +12 moreMultiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier,...CVE-2004-0803Fix available7.5 HighOctober 15, 2004
microsoft ie, mozilla firefox, kde konqueror +2 more +4 moreMozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains,...CVE-2004-0867EPSS 17.2%7.5 HighSeptember 24, 2004
kde konquerorKDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also...CVE-2004-08705.0 MediumSeptember 16, 2004
microsoft ie, internet explorer, kde konqueror +2 more +4 moreInternet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains,...CVE-2004-0866EPSS 10.1%7.5 HighSeptember 16, 2004
kde, kde konqueror, gentoo linux +1 more +3 moreKonqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level...CVE-2004-07467.5 HighSeptember 14, 2004
kdeThe DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a...CVE-2004-06904.6 MediumSeptember 14, 2004
kde, debian linux +1 moreKDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations,...CVE-2004-0689Fix available7.1 HighAugust 18, 2004
kde konquerorKonqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one...CVE-2004-07217.5 HighJuly 23, 2004
kde konquerorKDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar...CVE-2004-0527Public exploit5.0 MediumJune 8, 2004
kde konquerorThe URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters...CVE-2004-0411Fix available7.5 HighMay 20, 2004
kde konqueror, konqueror embedded +1 moreKonqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie...CVE-2003-0592Fix available7.5 HighMarch 10, 2004
kdeBuffer overflow in the VCF file information reader for KDE Personal Information Management ...CVE-2003-0988Fix available7.5 HighFebruary 17, 2004
kde konquerorKonqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web...CVE-2003-1478Public exploit4.3 MediumDecember 31, 2003
kdeKDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not...CVE-2003-06927.5 HighSeptember 18, 2003
kdeKDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds,...CVE-2003-069010.0 HighSeptember 18, 2003
kde konqueror, konqueror embedded, redhat analog real-time synthesizer +5 more +7 moreKDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of...CVE-2003-04595.0 MediumAugust 1, 2003
kde, kde konqueror embedded, apple safari +3 more +5 moreKonqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X...CVE-2003-03707.5 HighJune 5, 2003
apple safari, kde konqueror embedded +1 moreSafari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509...CVE-2003-03555.0 MediumMay 30, 2003
kde kopeteThe GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing...CVE-2003-02567.5 HighMay 9, 2003
kdeKDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via ...CVE-2003-0204Fix available7.5 HighApril 12, 2003
kdeMultiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that...CVE-2002-1393Fix available7.5 HighJanuary 8, 2003
kdeBuffer overflow in konqueror in KDE 2.1 through 3.0 and 3.0.2 allows remote attackers to cause a...CVE-2002-23335.0 MediumDecember 31, 2002
kdeMultiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow ...CVE-2002-1306Fix available7.5 HighNovember 21, 2002
kdeUnknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later...CVE-2002-12827.5 HighNovember 14, 2002
kdeUnknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and...CVE-2002-12817.5 HighNovember 14, 2002
lisa, kde, kde klisa +2 moreBuffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME...CVE-2002-1247Fix available7.2 HighNovember 11, 2002
kdeDirectory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers...CVE-2002-1224Public exploit5.0 MediumOctober 28, 2002
kdeBuffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a,...CVE-2002-12237.5 HighOctober 28, 2002
kdeKonqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie,...CVE-2002-11527.5 HighOctober 11, 2002
kde, kde konqueror +1 moreThe cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not...CVE-2002-1151Fix available7.5 HighSeptember 16, 2002
kde, kde konqueror +1 moreThe SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints...CVE-2002-0970Fix available7.5 HighAugust 17, 2002
kde k-mailKmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email...CVE-2002-03425.0 MediumMay 3, 2002
kicq, kde +1 moreKICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.CVE-2002-0227Public exploit5.0 MediumMay 3, 2002
kde kdeutilsklprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink...CVE-2001-11974.6 MediumDecember 14, 2001
kde ktvKDE ktvision 0.1.1-271 and earlier allows local attackers to gain root privileges via a symlink...CVE-2001-0782Public exploit7.2 HighOctober 12, 2001
kde, suse linux +1 morekfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a...CVE-2001-0610Public exploit4.6 MediumJuly 27, 2001
kde kvtFormat string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary...CVE-2000-09187.2 HighNovember 29, 2000
kde, caldera openlinux +1 moreThe KApplication class in the KDE 1.1.2 configuration file management capability allows local...CVE-2000-0530Public exploit7.2 HighMay 31, 2000
kdeBuffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY...CVE-2000-0460Public exploit7.2 HighMay 27, 2000
kdeThe KDE kscd program does not drop privileges when executing a program specified in a user's...CVE-2000-0393Public exploit7.2 HighMay 16, 2000
kde k-mailKDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.CVE-1999-0735Public exploit4.6 MediumJanuary 4, 2000
kde k-mailBuffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an...CVE-2000-04815.0 MediumJune 1, 1999
kde kvtVulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.CVE-2000-03737.2 HighJune 1, 1999
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open