Vulnerabilities (CVE)

Filtered by vendor Kde Subscribe
Total 195 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-1223 1 Kde 1 Kde 2024-02-28 7.5 HIGH N/A
Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps (PostScript) input file.
CVE-2001-0610 2 Kde, Suse 2 Kde, Suse Linux 2024-02-28 4.6 MEDIUM N/A
kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp.
CVE-2000-0371 1 Kde 1 Kde 2024-02-28 1.2 LOW N/A
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
CVE-2002-1247 2 Kde, Lisa 3 Kde, Klisa, Lisa 2024-02-28 7.2 HIGH N/A
Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon.
CVE-1999-1267 1 Kde 1 Kde 2024-02-28 5.0 MEDIUM N/A
KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server.
CVE-2002-0342 1 Kde 1 K-mail 2024-02-28 5.0 MEDIUM N/A
Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is approximately 55 K long.
CVE-1999-0735 1 Kde 1 K-mail 2024-02-28 4.6 MEDIUM N/A
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.
CVE-2004-0690 1 Kde 1 Kde 2024-02-28 4.6 MEDIUM N/A
The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory.
CVE-2002-0227 2 Kde, Kicq 2 Kde, Kicq 2024-02-28 5.0 MEDIUM N/A
KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.
CVE-1999-1107 1 Kde 1 Kde 2024-02-28 7.2 HIGH N/A
Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable.
CVE-1999-1270 1 Kde 1 Kde 2024-02-28 4.6 MEDIUM N/A
KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps.
CVE-2004-0870 1 Kde 1 Konqueror 2024-02-28 5.0 MEDIUM N/A
KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
CVE-2000-0481 1 Kde 1 K-mail 2024-02-28 5.0 MEDIUM N/A
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.
CVE-2002-1151 1 Kde 2 Kde, Konqueror 2024-02-28 7.5 HIGH N/A
The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains.
CVE-2000-0460 1 Kde 1 Kde 2024-02-28 7.2 HIGH N/A
Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable.