3013 matches found
Session fixation
fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of a password...
CVE-2020-12755
fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of a password...
CVE-2020-12755
fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of a password...
CVE-2020-12755
CVE-2020-12755 affects KDE kio-extras (fishProtocol::establishConnection in fish/fish.cpp) through version 20.04.0. The vulnerability may cause a cacheAuthentication call even when keepPassword is not set, potentially leading to unintended storage of passwords in KWallet. Connected documents cons...
Unspecified Vulnerability in KDE KMail (CNVD-2021-31481)
KDE KMail is an e-mail component of Kontact personal information management suite from the KDE community. A security vulnerability exists in KDE KMail versions prior to 19.12.3. An attacker could use this vulnerability to cause KMail to append a local file to a written email message without...
DEBIAN-CVE-2020-11880
An issue was discovered in KDE KMail before 19.12.3. By using the proprietary non-RFC6068 "mailto?attach=..." parameter, a website or other source of mailto links can make KMail attach local files to a composed email message without showing a warning to the user, as demonstrated by an...
CVE-2020-11880
An issue was discovered in KDE KMail before 19.12.3. By using the proprietary non-RFC6068 "mailto?attach=..." parameter, a website or other source of mailto links can make KMail attach local files to a composed email message without showing a warning to the user, as demonstrated by an...
CVE-2020-11880
An issue was discovered in KDE KMail before 19.12.3. By using the proprietary non-RFC6068 "mailto?attach=..." parameter, a website or other source of mailto links can make KMail attach local files to a composed email message without showing a warning to the user, as demonstrated by an...
Code injection
An issue was discovered in KDE KMail before 19.12.3. By using the proprietary non-RFC6068 "mailto?attach=..." parameter, a website or other source of mailto links can make KMail attach local files to a composed email message without showing a warning to the user, as demonstrated by an...
CVE-2020-11880
An issue was discovered in KDE KMail before 19.12.3. By using the proprietary non-RFC6068 "mailto?attach=..." parameter, a website or other source of mailto links can make KMail attach local files to a composed email message without showing a warning to the user, as demonstrated by an...
CVE-2020-11880
An issue was discovered in KDE KMail before 19.12.3. By using the proprietary non-RFC6068 "mailto?attach=..." parameter, a website or other source of mailto links can make KMail attach local files to a composed email message without showing a warning to the user, as demonstrated by an...
CVE-2020-11880
CVE-2020-11880 affects KDE KMail prior to 19.12.3. A non-RFC6068 mailto?attach=… parameter lets a website or mailto link cause KMail to attach local files to a composed message without warning (demonstrated by attach=.bash_history). The vulnerability arises from how KMail handles the proprietary ...
Spoofable Common Name Of A Certificate
The kdelibs and kdelibs3 packages is vulnerable to spoofing of common name of a certificate. An input sanitization flaw was found in the KSSL KDE SSL Wrapper API. An attacker could supply a specially-crafted SSL certificate for example, via a web page to an application using KSSL, such as the...
Denial Of Service (DoS)
The K Desktop Environment KDE is vulnerable to Denial Of Service DoS. A privilege escalation flaw was found in the KDE Display Manager KDM. allowing a local user with console access to trigger a race condition, possibly resulting in the permissions of an arbitrary file being set to world writable...
KDE Okular Input Validation Error Vulnerability
KDE Okular is an open source general-purpose document viewer for the KDE community. An input validation error vulnerability exists in KDE Okular versions prior to 1.10.0, which can be exploited by an attacker to execute arbitrary code on a system with the help of a specially crafted PDF file...
CVE-2020-9359
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document...
CVE-2020-9359
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document...
DEBIAN-CVE-2020-9359
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document...
