UBUNTU-CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

CVE-2018-6790

KDE Plasma Workspace (before 5.12.0) contains a vulnerability in dataengines/notifications/notificationsengine.cpp that allows remote attackers to discover a client’s IP address via a URL in a notification, demonstrated by the src attribute of an IMG element. The issue results from missing saniti...

CVE-2018-6791

CVE-2018-6791 affects KDE Plasma Workspaces; the vulnerability exists in soliduiserver/deviceserviceaction.cpp and is triggered when a VFAT thumbdrive with volume labels like "$(touch b)" or labels containing `` or $() is mounted via the device notifier, causing arbitrary command execution. Upstr...

CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

CVE-2018-6790

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

CVE-2018-6791: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

CVE-2018-6790: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element...

PT-2018-17747

Name of the Vulnerable Software and Affected Versions KDE Plasma Workspace versions prior to 5.12.0 Description An issue was discovered in the device service action of KDE Plasma Workspace. When a vfat thumbdrive with a volume label containing or $ is plugged in and mounted, it is interpreted as ...

PT-2018-17746

Name of the Vulnerable Software and Affected Versions KDE Plasma Workspace versions prior to 5.12.0 Description An issue in the notifications engine allows remote attackers to discover client IP addresses via a URL in a notification. This can be achieved by using the src attribute of an IMG...

Citrix Workspace App for Linux: How to trust a CA certificate?

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. This article's objective is to describe the steps involved in trusting a CA certificate in Citrix...

CVE-2017-1000442

Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...

CVE-2017-1000442

Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...

CVE-2017-1000442

Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...

CVE-2017-1000442: Improper Neutralization of Input During Web Page Generation

Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...

PT-2018-5213

Name of the Vulnerable Software and Affected Versions Passbolt API versions 1.6.4 and older Description The issue concerns a XSS vulnerability in the url field on the password workspace. Recommendations For Passbolt API versions 1.6.4 and older, update to a version newer than 1.6.4 to resolve the...

Connection failures due to SSL certificate errors with Citrix Workspace app for Chrome / Citrix Receiver for Chrome

Connection to StoreFront/VDA will fail and may show cannot connect to server error or some SSL Certificate error in console logs. One of the reason could be invalid SSL certificate. Applicable Products: Citrix Receiver for HTML5, Citrix Receiver for Chrome, Citrix Workspace app for Chrome, Citrix...