CVE-2018-6791

CVE-2018-6791 affects KDE Plasma Workspaces; the vulnerability exists in soliduiserver/deviceserviceaction.cpp and is triggered when a VFAT thumbdrive with volume labels like "$(touch b)" or labels containing `` or $() is mounted via the device notifier, causing arbitrary command execution. Upstr...

CVE-2018-6790

KDE Plasma Workspace (before 5.12.0) contains a vulnerability in dataengines/notifications/notificationsengine.cpp that allows remote attackers to discover a client’s IP address via a URL in a notification, demonstrated by the src attribute of an IMG element. The issue results from missing saniti...

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

Fedora 25 : konversation (2017-f58bbbbdb0)

Latest stable release, includes security fix for CVE-2017-15923 see also https://konversation.kde.org/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as muc...

Konversation Denial of Service Vulnerability

Konversation is an Internet Relay Chat client built on the KDE platform. A denial of service vulnerability exists in Konversation. A remote attacker could exploit this vulnerability to cause a denial of service crash...

konversation -- crash in IRC message parsing

KDE reports: Konversation has support for colors in IRC messages. Any malicious user connected to the same IRC network can send a carefully crafted message that will crash the Konversation user client...

CVE-2014-8878

KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network...

Information disclosure

KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2014-8878

KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2014-8878

KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2014-8878

CVE-2014-8878 affects KDE KMail. The available documents state that KDE KMail does not encrypt attachments in emails when “automatic encryption” is enabled, allowing remote attackers to obtain sensitive information by sniffing the network. The root cause is the lack of encryption for attachments ...

CVE-2014-8878

Removed by vendor...

[SECURITY] Fedora 25 Update: WindowMaker-0.95.7-3.fc25.1

Window Maker is an X11 window manager designed to give additional integration support to the GNUstep Desktop Environment. In every way possible, it reproduces the elegant look and feel of the NEXTSTEP GUI. It is fast, feature rich, easy to configure, and easy to use. In addition, Window Maker wor...

[SECURITY] Fedora 26 Update: WindowMaker-0.95.8-3.fc26

Window Maker is an X11 window manager designed to give additional integration support to the GNUstep Desktop Environment. In every way possible, it reproduces the elegant look and feel of the NEXTSTEP GUI. It is fast, feature rich, easy to configure, and easy to use. In addition, Window Maker wor...

[SECURITY] Fedora 25 Update: kf5-messagelib-16.12.3-2.fc25

KDE Message libraries...

[SECURITY] Fedora 26 Update: kf5-messagelib-17.04.1-2.fc26

KDE Message libraries...

[ASA-201706-16] kmail: information disclosure

Arch Linux Security Advisory ASA-201706-16 ========================================== Severity: Medium Date : 2017-06-14 CVE-ID : CVE-2017-9604 Package : kmail Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-299 Summary ======= The package kmail before version...