Vulnerabilities > KDE > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2010-03-03 | CVE-2010-0923 | Race Condition vulnerability in KDE SC 4.4.0 Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an unattended workstation by pressing the Enter key at a certain time, related to multiple forked processes. | 6.9 |
| 2009-07-20 | CVE-2009-2537 | Resource Management Errors vulnerability in KDE Konqueror KDE Konqueror allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692. | 4.3 |
| 2008-12-24 | CVE-2008-5712 | Improper Input Validation vulnerability in KDE Konqueror 3.5.9 The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1) a long COLOR attribute in an HR element; or a long (a) BGCOLOR or (b) BORDERCOLOR attribute in a (2) TABLE, (3) TD, or (4) TR element. | 5.0 |
| 2008-12-22 | CVE-2008-5698 | Resource Management Errors vulnerability in KDE Konqueror HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (application crash) via an invalid document.load call that triggers use of a deleted object. | 4.3 |
| 2008-10-02 | CVE-2008-4382 | Resource Management Errors vulnerability in KDE Konqueror 3.5.9 Konqueror in KDE 3.5.9 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters. | 5.0 |
| 2008-04-28 | CVE-2008-1671 | Configuration vulnerability in KDE start_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service and possibly execute arbitrary code via "user-influenceable input" (probably command-line arguments) that cause start_kdeinit to send SIGUSR1 signals to other processes. | 4.6 |
| 2007-12-28 | CVE-2007-6591 | Remote Security vulnerability in KDE Konqueror 3.5.5/3.95.00 KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, even though these fields cannot be examined in the product, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site. network kde | 4.3 |
| 2007-12-19 | CVE-2007-5963 | Local Denial Of Service vulnerability in KDE KDM Unspecified vulnerability in kdebase allows local users to cause a denial of service (KDM login inaccessible, or resource consumption) via unknown vectors. local kde | 4.7 |
| 2007-11-15 | CVE-2007-6000 | Resource Management Errors vulnerability in KDE Konqueror KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via large HTTP cookie parameters. | 5.0 |
| 2007-09-21 | CVE-2007-4569 | Permissions, Privileges, and Access Controls vulnerability in KDE backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors. | 6.8 |