Skip to contentKde vulnerabilities
Newest
- kde ktexteditorAn issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary...CVE-2018-10361Fix available7.8 High
- debian linux, kde plasma-workspace +1 moreAn issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5...CVE-2018-6791Public exploitFix available6.8 Medium
- kde plasma-workspaceAn issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications...CVE-2018-6790Fix available5.3 Medium
- kde kmail, messagelib +1 moreKDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17...CVE-2017-9604Fix available7.5 High
- kde kauth, kdelibs +1 moreKDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by...CVE-2017-8422Public exploitFix available7.8 High
- kde kdelibs, kio +1 morekpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL...CVE-2017-6410Fix available5.5 Medium
- kde ark, fedoraproject fedora +1 moreark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an...CVE-2017-5330Fix available7.8 High
- kde kmailKMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail...CVE-2016-79686.5 Medium
- kde kmailKMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the...CVE-2016-79678.1 High
- kde kscreenlocker, plasma-workspace, fedoraproject fedora +1 more +3 moreTurning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can...CVE-2016-2312Fix available6.8 Medium
- kde kde-cli-tools, opensuse leap, opensuse +2 moreA maliciously crafted command line for kdesu can result in the user only seeing part of the...CVE-2016-7787Fix available4.9 Medium
- kde kmail, debian linux, fedoraproject fedora +1 more +3 moreThrough a malicious URL that contained a quote character it was possible to inject HTML code in...CVE-2016-7966Fix available7.3 High
- canonical ubuntu linux, kde karchives +1 moreDirectory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows...CVE-2016-6232Fix available7.5 High
- kde frameworks, opensuse leap, opensuse +2 morekinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which...CVE-2016-3100Fix available8.4 High
- artsproject arts, kde kdelibs +1 moreaRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which...CVE-2015-7543Fix available7.0 High
- kde kmailKDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which...CVE-2014-8878Fix available5.9 Medium
- kde kde-workspace, plasma-workspace +1 morekde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input...CVE-2015-13084.3 Medium
- kde plasma-workspaceplasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse...CVE-2015-13074.3 Medium
- kde applicationskwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC...CVE-2013-7252Fix available5.0 Medium
- kde kde-runtime, kio-extras, urs wolfer kwebkitpart +1 more +3 moreMultiple cross-site scripting (XSS) vulnerabilities in KDE-Runtime 4.14.3 and earlier,...CVE-2014-8600Fix available4.3 Medium
- kde kde-workspace, plasma-desktop +1 moreThe KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1...CVE-2014-8651Fix available7.2 High
- kde kauth, kdelibs, canonical ubuntu linux +1 more +3 moreKDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a...CVE-2014-5033Fix available6.9 Medium
- kde kdelibs, opensuse +1 morekio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not...CVE-2014-3494Fix available4.3 Medium
- kde kdelibskioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover...CVE-2013-20745.0 Medium
- kde ark, canonical ubuntu linux, kde sc +1 more +3 moreDirectory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and...CVE-2011-27256.8 Medium
- kde kde-workspace, debian linux +1 morekde-workspace before 4.10.5 has a memory leak in plasma desktopCVE-2013-41337.5 High
- kde kde-workspace, sc, opensuse +2 moreKDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17...CVE-2013-41325.0 Medium
- kdeUse-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3,...CVE-2012-4515Public exploit6.8 Medium
- kderendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a...CVE-2012-4514Public exploit5.0 Medium
- kdekhtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a...CVE-2012-4513Public exploitEPSS 12.6%6.4 Medium
- kde kofficeHeap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in...CVE-2012-34557.5 High
- kde pimThe HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6...CVE-2012-34134.3 Medium
- kde kcheckpasskcheckpass passes a user-supplied argument to the pam_start function, often within a setuid...CVE-2011-50546.9 Medium
- kde scThe KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does...CVE-2011-3365Fix available4.3 Medium
- kde scDirectory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui...CVE-2011-1586Fix available5.8 Medium
- kde scCross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part...CVE-2011-11684.3 Medium
- foolabs xpdf, kde kdegraphics, poppler +1 more +3 moreThe FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5,...CVE-2010-3704Fix available6.8 Medium
- kde scHeap-based buffer overflow in the RLE decompression functionality in the...CVE-2010-2575Fix available6.8 Medium
- kde sc, kget +1 moreKGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the...CVE-2010-15116.4 Medium
- kde scDirectory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers...CVE-2010-10005.8 Medium
- kde scRace condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2...CVE-2010-0436Fix available6.9 Medium
- kde scRace condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE...CVE-2010-09236.9 Medium
- gnome gpdf, kde kdegraphics, kpdf +1 more +3 moreThe FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics...CVE-2009-4035Fix available9.3 High
- kde kdelibsKDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain...CVE-2009-2702Fix available7.5 High
- kde kmplayerBuffer overflow in KMplayer 2.9.4.1433 and earlier allows remote attackers to cause a denial of...CVE-2009-2896Public exploit9.3 High
- kde konquerorKDE Konqueror allows remote attackers to cause a denial of service (memory consumption) via a...CVE-2009-25374.3 Medium
- kde konquerorThe HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service ...CVE-2008-5712Public exploit5.0 Medium
- kde konquerorHTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to...CVE-2008-5698Public exploit4.3 Medium
- kde konquerorKonqueror in KDE 3.5.9 allows remote attackers to cause a denial of service (application crash)...CVE-2008-43825.0 Medium
- kdestart_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause...CVE-2008-16714.6 Medium
- Show moreLoading…