CVE-2018-6790

KDE Plasma Workspace (before 5.12.0) contains a vulnerability in dataengines/notifications/notificationsengine.cpp that allows remote attackers to discover a client’s IP address via a URL in a notification, demonstrated by the src attribute of an IMG element. The issue results from missing saniti...

CVE-2024-36041

The CVE-2024-36041 issue affects KDE Plasma Workspace (plasma-workspace) prior to 5.27.11.1 and 6.x prior to 6.0.5.1, where KSmserver incorrectly accepts ICE connections from localhost, allowing a local attacker to gain access to the session manager and potentially execute code on the victim at t...

CVE-2018-6791

CVE-2018-6791 affects KDE Plasma Workspaces; the vulnerability exists in soliduiserver/deviceserviceaction.cpp and is triggered when a VFAT thumbdrive with volume labels like "$(touch b)" or labels containing `` or $() is mounted via the device notifier, causing arbitrary command execution. Upstr...

CVE-2024-1433

KDE Plasma Workspace

CVE-2015-1308

CVE-2015-1308 affects kde-workspace 4.2.0 and plasma-workspace prior to 5.1.95. Affects KDE desktop components that manage the X server session; the underlying issue allows remote attackers with access to the X server while the screen is locked to observe input events and thereby obtain passwords...

CVE-2016-2312

CVE-2016-2312 describes a vulnerability in Plasma-workspace/kscreenlocker where turning all screens off while the lock screen is shown can cause the screen to unlock when a screen is turned back on. The issue is documented across multiple sources (NVD, Debian, Ubuntu, OpenSUSE OSV entries) with t...

CVE-2015-1307

CVE-2015-1307 affects KDE Plasma-Workspace (plasma-workspace) prior to 5.1.95. The vulnerability arises from a Trojan horse Look and Feel package, enabling remote attackers to obtain passwords. The available connected documents corroborate the same description across multiple sources (SUSE, NVD/N...