3013 matches found
[SECURITY] Fedora 25 Update: kf5-kio-5.31.0-2.fc25
KDE Frameworks 5 Tier 3 solution for filesystem abstraction...
CVE-2017-6410
kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...
CVE-2017-6410
kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...
CVE-2017-6410
kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...
DEBIAN-CVE-2017-6410
kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...
Authentication flaw
kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...
CVE-2017-6410
Affected components: KDE kio (kpac/script.cpp) before 5.32 and kde4libs before 4.14.30. Root cause / flaw: PAC FindProxyForURL called with a full HTTPS URL, potentially including Basic Auth credentials, a query string, or PATH_INFO, enabling leakage of sensitive information via crafted PAC files....
CVE-2017-6410
kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...
CVE-2017-6410
kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...
KDE Ark Arbitrary Code Execution Vulnerability
KDE is a free and open source X desktop management program for Linux and Unix workstations.KDE provides support for various network protocols through the KIO subsystem.Ark is one of the archive tools. An arbitrary code execution vulnerability exists in KDE Ark versions prior to 16.12.1. An attack...
[SECURITY] Fedora 23 Update: kdepimlibs-4.14.10-15.fc23
Personal Information Management PIM libraries for KDE 4...
[SECURITY] Fedora 24 Update: kdepimlibs-4.14.10-15.fc24
Personal Information Management PIM libraries for KDE 4...
Fedora 24 : 1:kdepim-runtime / 7:kdepim / kdepim-addons / kdepim-apps-libs / etc (2016-1b042a79bd)
KDE PIM Applications 16.08.2, https://www.kde.org/announcements/announce-applications-16.08.2.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
[SECURITY] Fedora 24 Update: kf5-messagelib-16.08.2-1.fc24
KDE Message libraries...
[SECURITY] Fedora 24 Update: kdepim-apps-libs-16.08.2-1.fc24
KDE PIM common libraries...
[SECURITY] Fedora 24 Update: kf5-libkleo-16.08.2-1.fc24
KDE PIM cryptographic library...
[SECURITY] Fedora 24 Update: kdepim-runtime-16.08.2-1.fc24
KDE PIM Runtime Environment...
[SECURITY] Fedora 24 Update: kdepim-addons-16.08.2-1.fc24
Additional plugins for KDE PIM applications...