11 results (0.010 seconds)

CVSS: 6.5EPSS: 7%CPEs: 77EXPL: 2

11 Nov 2012 — rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part." rendering/render_replaced.cpp en Konqueror en KDE antes de v4.9.3 permite a atacantes remotos provocar una denegación de servicio (desreferencia puntero NULL) a través de una página web modificada, relacionado con "tratar de volver a utilizar un marco con una parte nula". Multiple vulnerab... • https://www.exploit-db.com/exploits/22406 •

CVSS: 9.1EPSS: 0%CPEs: 28EXPL: 0

29 Jan 2005 — The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session. • http://www.debian.org/security/2005/dsa-660 •

CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 0

19 Aug 2004 — KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files. KDE 3.3.0 no maneja adecuadamente ciertos enlaces simbólicos que apuntan a localizaciones "gastadas", lo que podría permitir a usaurios locales crear o truncar ficheros arbitrarios. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0

05 Jun 2003 — Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack. Konqueror Embedded y KDE 2.2.2 y anteriores no validan el campo Common Name (CN) en certificados X.509, lo que permitiría que atacantes remotos falsifiquen certificados mediante un ataque "man-in-the-middle". • http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/004983.html •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 1

27 Jul 2001 — kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp. • https://www.exploit-db.com/exploits/20781 •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

18 Nov 1998 — KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables. • http://marc.info/?l=bugtraq&m=91141486301691&w=2 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

18 Nov 1998 — Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable. • http://marc.info/?l=bugtraq&m=91141486301691&w=2 •

CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 0

18 Nov 1998 — KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file. • http://marc.info/?l=bugtraq&m=91141486301691&w=2 •

CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 0

18 Nov 1998 — KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable. • http://marc.info/?l=bugtraq&m=91141486301691&w=2 •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

11 Jul 1998 — KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps. • http://lists.kde.org/?l=kde-devel&m=90221974029738&w=2 •