Filtered by vendor Kde
Subscribe
Total
195 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2002-1223 | 1 Kde | 1 Kde | 2024-02-28 | 7.5 HIGH | N/A |
Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps (PostScript) input file. | |||||
CVE-2001-0610 | 2 Kde, Suse | 2 Kde, Suse Linux | 2024-02-28 | 4.6 MEDIUM | N/A |
kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp. | |||||
CVE-2000-0371 | 1 Kde | 1 Kde | 2024-02-28 | 1.2 LOW | N/A |
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack. | |||||
CVE-2002-1247 | 2 Kde, Lisa | 3 Kde, Klisa, Lisa | 2024-02-28 | 7.2 HIGH | N/A |
Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon. | |||||
CVE-1999-1267 | 1 Kde | 1 Kde | 2024-02-28 | 5.0 MEDIUM | N/A |
KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server. | |||||
CVE-2002-0342 | 1 Kde | 1 K-mail | 2024-02-28 | 5.0 MEDIUM | N/A |
Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is approximately 55 K long. | |||||
CVE-1999-0735 | 1 Kde | 1 K-mail | 2024-02-28 | 4.6 MEDIUM | N/A |
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories. | |||||
CVE-2004-0690 | 1 Kde | 1 Kde | 2024-02-28 | 4.6 MEDIUM | N/A |
The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory. | |||||
CVE-2002-0227 | 2 Kde, Kicq | 2 Kde, Kicq | 2024-02-28 | 5.0 MEDIUM | N/A |
KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message. | |||||
CVE-1999-1107 | 1 Kde | 1 Kde | 2024-02-28 | 7.2 HIGH | N/A |
Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable. | |||||
CVE-1999-1270 | 1 Kde | 1 Kde | 2024-02-28 | 4.6 MEDIUM | N/A |
KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps. | |||||
CVE-2004-0870 | 1 Kde | 1 Konqueror | 2024-02-28 | 5.0 MEDIUM | N/A |
KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection." | |||||
CVE-2000-0481 | 1 Kde | 1 K-mail | 2024-02-28 | 5.0 MEDIUM | N/A |
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name. | |||||
CVE-2002-1151 | 1 Kde | 2 Kde, Konqueror | 2024-02-28 | 7.5 HIGH | N/A |
The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains. | |||||
CVE-2000-0460 | 1 Kde | 1 Kde | 2024-02-28 | 7.2 HIGH | N/A |
Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable. |