Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2018-19516
Disclosure Date: March 12, 2020 (last updated February 21, 2025)
messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv="REFRESH" value.
0
Attacker Value
Unknown
CVE-2018-19120
Disclosure Date: November 29, 2018 (last updated November 08, 2023)
The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.
0
Attacker Value
Unknown
CVE-2013-7252
Disclosure Date: January 18, 2015 (last updated October 05, 2023)
kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack.
0
