352 matches found
CVE-2018-6791
An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...
CVE-2018-6791
An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...
CVE-2018-6790
An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...
CVE-2018-6790
KDE Plasma Workspace (before 5.12.0) contains a vulnerability in dataengines/notifications/notificationsengine.cpp that allows remote attackers to discover a client’s IP address via a URL in a notification, demonstrated by the src attribute of an IMG element. The issue results from missing saniti...
CVE-2018-6791
CVE-2018-6791 affects KDE Plasma Workspaces; the vulnerability exists in soliduiserver/deviceserviceaction.cpp and is triggered when a VFAT thumbdrive with volume labels like "$(touch b)" or labels containing `` or $() is mounted via the device notifier, causing arbitrary command execution. Upstr...
plasma-automation.com XSS vulnerability
Open Bug Bounty ID: OBB-257102 Description| Value ---|--- Affected Website:| plasma-automation.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
plasma.physics.wisc.edu XSS vulnerability
Vulnerable URL: http://plasma.physics.wisc.edu/publications/publications-for-experiment.php?experiment=1"...
Fedora 25 : plasma-desktop (2017-c1cd67adc1)
it was found that KDE plasma does not honor the setting for prompting when executing executable files on the desktop. This update resolves this issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...
Fedora Update for plasma-desktop FEDORA-2017-c1cd67adc1
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for plasma-desktop FEDORA-2017-13b5cb36c3
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 24 : plasma-desktop (2017-13b5cb36c3)
it was found that KDE plasma does not honor the setting for prompting when executing executable files on the desktop. This update resolves this issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...
[SECURITY] Fedora 24 Update: plasma-desktop-5.8.5-4.fc24
Plasma Desktop shell...
[SECURITY] Fedora 25 Update: plasma-desktop-5.8.5-4.fc25
Plasma Desktop shell...
CVE-2016-2312
Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...
Code injection
Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...
CVE-2016-2312
Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...
DEBIAN-CVE-2016-2312
Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...
UBUNTU-CVE-2016-2312
Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...
CVE-2016-2312
Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...
CVE-2016-2312
CVE-2016-2312 describes a vulnerability in Plasma-workspace/kscreenlocker where turning all screens off while the lock screen is shown can cause the screen to unlock when a screen is turned back on. The issue is documented across multiple sources (NVD, Debian, Ubuntu, OpenSUSE OSV entries) with t...