Skip to contentKde vulnerabilities
Newest
- kdeHeap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML...CVE-2008-16709.3 High
- kde konquerorKDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of...CVE-2007-65914.3 Medium
- kdeUnspecified vulnerability in kdebase allows local users to cause a denial of service (KDM login...CVE-2007-59634.7 Medium
- kde konquerorKDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via...CVE-2007-6000Public exploit5.0 Medium
- kdebackend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown...CVE-2007-4569Fix available6.8 Medium
- kde kmplayerKMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU...CVE-2007-4941Public exploit7.1 High
- kde konquerorUnspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a...CVE-2007-4229Public exploit4.3 Medium
- kde konquerorVisual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL...CVE-2007-42256.8 Medium
- kde konquerorKDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval...CVE-2007-42244.3 Medium
- kde konquerorkonqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme...CVE-2007-38202.6 Low
- kde konquerorVisual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address...CVE-2007-31436.4 Medium
- kde konquerorKonqueror 3.5.5 release 45.4 allows remote attackers to cause a denial of service (browser crash...CVE-2007-21645.0 Medium
- kde konquerorKonqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript...CVE-2007-15657.8 High
- kde konquerorThe FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to...CVE-2007-1564Public exploit6.8 Medium
- kde k-mailKmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to...CVE-2006-7139Public exploit2.6 Low
- kde konquerorecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote...CVE-2007-1308Public exploit4.3 Medium
- kde k-mailKMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which...CVE-2007-12657.8 High
- kde konquerorThe KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments...CVE-2007-05372.6 Low
- kde, xpdf +1 moreThe Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before...CVE-2007-0104Fix available6.8 Medium
- kde ksirc, canonical ubuntu linux +1 moreKsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG...CVE-2006-6811Public exploitEPSS 10.6%6.5 Medium
- kde libkhtmlThe nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other...CVE-2006-6660Public exploit4.3 Medium
- kde kdegraphicsStack consumption vulnerability in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics 3, as used...CVE-2006-62975.0 Medium
- kde kofficeInteger overflow in the KPresenter import filter for Microsoft PowerPoint files (filters...CVE-2006-6120Fix available6.8 Medium
- kde kdebaseThe KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which...CVE-2006-374210.0 High
- kde, redhat enterprise linux, enterprise linux desktop +2 morekdesktop_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not...CVE-2006-2933Fix available4.6 Medium
- kde konquerorKDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application...CVE-2006-3672Public exploit2.6 Low
- kde artsartswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check...CVE-2006-29167.8 High
- kdeKDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via...CVE-2006-2449Fix available4.0 Medium
- kdeHeap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript...CVE-2006-0019Fix available7.5 High
- kde konquerorKonqueror can associate a cookie with multiple domains when the DNS resolver has a non-root...CVE-2005-46846.4 Medium
- kde kofficeHeap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows...CVE-2005-2971Fix available7.5 High
- kdekcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack...CVE-2005-2494Fix available7.2 High
- kdelangen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names,...CVE-2005-2101Fix available5.0 Medium
- kde, debian linux +1 moreThe (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the...CVE-2005-1920Fix available7.5 High
- centericq, ekg, kadu +1 more +3 moreMultiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3...CVE-2005-1852Fix available7.5 High
- kde, conectiva linux, kde quanta +1 more +3 moreKommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user,...CVE-2005-07547.5 High
- kde, kmail +1 moreKMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the...CVE-2005-0404Public exploit5.0 Medium
- kdeBuffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary...CVE-2005-1046Fix available7.5 High
- kde dcopserver, desktop communication protocol daemon +1 moreDesktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local...CVE-2005-0396Fix available2.1 Low
- bernd wuebben kppp, kde +1 moreKPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly...CVE-2005-0205Fix available4.6 Medium
- kdeMultiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars...CVE-2005-001110.0 High
- debian linux, xpdf, ascii ptex +15 more +17 moreThe patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete...CVE-2005-0206Fix available7.5 High
- kdeThe dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames,...CVE-2005-03652.1 Low
- kde, kde konqueror +1 moreThe International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote...CVE-2005-02375.0 Medium
- kde, debian linux, redhat enterprise linux +2 more +4 moreThe KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain...CVE-2005-0078Fix available4.6 Medium
- easy software products cups, kde kpdf, libextractor +24 more +26 moreXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and...CVE-2005-3626Fix available5.0 Medium
- easy software products cups, kde kpdf, libextractor +24 more +26 moreXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and...CVE-2005-3625Fix available10.0 High
- easy software products cups, kde kpdf, libextractor +24 more +26 moreThe CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler...CVE-2005-3624Fix available5.0 Medium
- kde kpdf, xpdf +1 morexpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to...CVE-2005-2097Fix available2.1 Low
- gentoo linux, kde, opera browser +2 moreOpera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote...CVE-2004-1491Public exploitEPSS 12.6%5.0 Medium
- Show moreLoading…