26 matches found
CVE-2014-8600
Multiple cross-site scripting XSS vulnerabilities in KDE-Runtime 4.14.3 and earlier, kwebkitpart 1.3.4 and earlier, and kio-extras 5.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via a crafted URI using the 1 zip, 2 trash, 3 tar, 4 thumbnail, 5 smtps, 6 smtp, 7 smb...
PT-2014-8645
Name of the Vulnerable Software and Affected Versions KDE-Runtime versions 4.14.3 and earlier kwebkitpart versions 1.3.4 and earlier kio-extras versions 5.1.1 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted URI using various schemes,...
CVE-2009-4976
Cross-site scripting XSS vulnerability in webkitpart.cpp in kwebkitpart allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...
CVE-2009-4976
Technical details for CVE-2009-4976 are not provided in the supplied documents. Connected records mention related CVEs (e.g., CVE-2010-2536) but do not specify affected products, root cause, or remediation. Monitor for updates.
CVE-2009-4976
Removed by vendor...
CVE-2009-4976: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in webkitpart.cpp in kwebkitpart allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536...