3017 matches found
CVE-2014-8600
CVE-2014-8600 covers multiple XSS vulnerabilities in KDE components: KDE-Runtime 4.14.3 and earlier, kwebkitpart 1.3.4 and earlier, and kio-extras 5.1.1 and earlier. The issue arises from improper handling of URIs in an error message, allowing an attacker to inject arbitrary web script or HTML vi...
[SECURITY] Fedora 19 Update: kwebkitpart-1.3.4-5.fc19
KWebKitPart is a web browser component for KDE KPart based on QtWebKit. You can use it for example for browsing the web in Konqueror...
CVE-2014-8651
The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility ntp utility name argument...
Code injection
The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility ntp utility name argument...
CVE-2014-8651
The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility ntp utility name argument...
CVE-2014-8651
The CVE-2014-8651 issue affects KDE Clock KCM helper in kde-workspace < 4.11.14 and plasma-desktop
[SECURITY] Fedora 20 Update: kwebkitpart-1.3.4-5.fc20
KWebKitPart is a web browser component for KDE KPart based on QtWebKit. You can use it for example for browsing the web in Konqueror...
Fedora 21 : kwebkitpart-1.3.4-5.fc21 (2014-15150)
Sanitize input to disallow JavaScript being executed in the context of the referenced hostname. See also https://www.kde.org/info/security/advisory-20141113-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable h...
Fedora 21 : kde-runtime-4.14.3-2.fc21 (2014-15618)
New security fix release, insufficient Input Validation By IO Slaves, see also https://www.kde.org/info/security/advisory-20141113-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
[SECURITY] Fedora 21 Update: kde-runtime-4.14.3-2.fc21
Core runtime for KDE 4...
[SECURITY] Fedora 21 Update: kwebkitpart-1.3.4-5.fc21
KWebKitPart is a web browser component for KDE KPart based on QtWebKit. You can use it for example for browsing the web in Konqueror...
KDE Clock KCM privilege escalation
No description provided...
[USN-2402-1] KDE workspace vulnerabilities
========================================================================== Ubuntu Security Notice USN-2402-1 November 11, 2014 kde-workspace vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...
KDE Konversation / Quassel IRC memory corruption
Memory corruption on ECB decryption...
[USN-2414-1] KDE-Runtime vulnerability
========================================================================== Ubuntu Security Notice USN-2414-1 November 24, 2014 kde-runtime vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...
Fedora 20 : kde-runtime-4.14.3-2.fc20 (2014-15532)
New security fix release, insufficient Input Validation By IO Slaves, see also https://www.kde.org/info/security/advisory-20141113-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora Update for kde-runtime FEDORA-2014-15532
Check the version of kde-runtime SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868520";...
[SECURITY] Fedora 20 Update: kde-runtime-4.14.3-2.fc20
Core runtime for KDE 4...
Ubuntu 12.04 LTS : kde-runtime vulnerability (USN-2414-1)
Tim Brown and Darron Burton discovered that KDE-Runtime incorrectly handled input validation. An attacker could possibly use this issue to execute arbitrary javascript. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory...
