Lucene search
+L

4696 matches found

NVD
NVD
added 2018/02/07 2:29 a.m.20 views

CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

5.3CVSS5.3AI score0.02087EPSS
SaveExploits0References5
OSV
OSV
added 2018/02/07 2:29 a.m.4 views

DEBIAN-CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

5.3CVSS7AI score0.02087EPSS
SaveExploits0References1
NVD
NVD
added 2018/02/07 2:29 a.m.19 views

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

7.2CVSS6.8AI score0.00776EPSS
SaveExploits0References3
OSV
OSV
added 2018/02/07 2:29 a.m.29 views

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

6.8CVSS7.5AI score
SaveExploits0References3
OSV
OSV
added 2018/02/07 2:29 a.m.32 views

CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

5.3CVSS7.1AI score
SaveExploits0References5
Prion
Prion
added 2018/02/07 2:29 a.m.27 views

Command injection

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

7.2CVSS6.8AI score0.00776EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2018/02/07 2:29 a.m.32 views

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

7.2CVSS6.7AI score0.00776EPSS
SaveExploits0References1
Prion
Prion
added 2018/02/07 2:29 a.m.18 views

Code injection

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

5CVSS5.2AI score0.02087EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2018/02/07 2:29 a.m.26 views

CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

5.3CVSS6.3AI score0.02087EPSS
SaveExploits0References3
OSV
OSV
added 2018/02/07 2:29 a.m.6 views

UBUNTU-CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

5.3CVSS5.8AI score0.02087EPSS
SaveExploits0References4
OSV
OSV
added 2018/02/07 2:29 a.m.7 views

UBUNTU-CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

6.8CVSS5.9AI score0.00776EPSS
SaveExploits0References2
CVE
CVE
added 2018/02/07 2:0 a.m.249 views

CVE-2018-6790

KDE Plasma Workspace (before 5.12.0) contains a vulnerability in dataengines/notifications/notificationsengine.cpp that allows remote attackers to discover a client’s IP address via a URL in a notification, demonstrated by the src attribute of an IMG element. The issue results from missing saniti...

5.3CVSS5.3AI score0.02087EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2018/02/07 2:0 a.m.88 views

CVE-2018-6791

CVE-2018-6791 affects KDE Plasma Workspaces; the vulnerability exists in soliduiserver/deviceserviceaction.cpp and is triggered when a VFAT thumbdrive with volume labels like "$(touch b)" or labels containing `` or $() is mounted via the device notifier, causing arbitrary command execution. Upstr...

7.2CVSS6.6AI score0.00776EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2018/02/07 2:0 a.m.61 views

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

7.2CVSS6.8AI score0.00776EPSS
SaveExploits0
Cvelist
Cvelist
added 2018/02/07 2:0 a.m.39 views

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

6.7AI score0.00776EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2018/02/07 2:0 a.m.25 views

CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

5.4AI score0.02087EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2018/02/07 2:0 a.m.29 views

CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

5.3CVSS5.3AI score0.02087EPSS
SaveExploits0
Citrix
Citrix
added 2018/01/09 12:0 a.m.14 views

Citrix Workspace App for Linux: How to trust a CA certificate?

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. This article's objective is to describe the steps involved in trusting a CA certificate in Citrix...

7AI score
SaveExploits0
OSV
OSV
added 2018/01/02 2:29 p.m.7 views

CVE-2017-1000442

Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...

5.4CVSS6.3AI score
SaveExploits0References2
Cvelist
Cvelist
added 2018/01/02 2:0 p.m.45 views

CVE-2017-1000442

Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...

5.3AI score0.00516EPSS
SaveExploits0References2
Rows per page
Query Builder