Skip to content
Noroxi

KDE records

198 published records for vendor kde.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
37
With a fix record
56.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 24
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

198 records
  • CVE-2004-0888
    43Plan

    Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote atta

    CriticalCVSS 10.0No exploitEPSS 10%

    kde · kofficeJan 27, 2005

  • CVE-2004-0889
    42Plan

    Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of serv

    CriticalCVSS 10.0No exploitEPSS 6%

    xpdf · xpdfJan 27, 2005

  • CVE-2005-0011
    41Plan

    Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Inter

    CriticalCVSS 10.0No exploitEPSS 5%

    kde · kdeMay 2, 2005

  • CVE-2005-3625
    41Plan

    Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial

    CriticalCVSS 10.0No exploitEPSS 4%

    libextractor · libextractorDec 31, 2005

  • CVE-2003-0690
    41Plan

    KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileg

    CriticalCVSS 10.0No exploitEPSS 3%

    kde · kdeOct 6, 2003

  • CVE-2009-3608
    40Plan

    Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf

    CriticalCVSS 9.3No exploitEPSS 10%

    poppler · popplerOct 21, 2009

  • CVE-2009-3604
    40Plan

    The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does

    CriticalCVSS 9.3No exploitEPSS 9%

    kde · kpdfOct 21, 2009

  • CVE-2009-3606
    40Plan

    Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow

    CriticalCVSS 9.3No exploitEPSS 9%

    poppler · popplerOct 21, 2009

  • CVE-2006-3742
    40Plan

    The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password b

    CriticalCVSS 10.0No exploitEPSS 1%

    kde · kdebaseSep 6, 2006

  • CVE-2004-1125
    39Monitor

    Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3

    CriticalCVSS 9.3No exploitEPSS 7%

    xpdf · xpdfJan 10, 2005

  • CVE-2009-2896
    39Monitor

    Buffer overflow in KMplayer 2.9.4.1433 and earlier allows remote attackers to cause a denial of service (application crash) or execute arbit

    CriticalCVSS 9.3Proof of conceptEPSS 6%

    kde · kmplayerAug 20, 2009

  • CVE-2012-4512
    38Monitor

    The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly

    HighCVSS 8.8Proof of conceptEPSS 12%

    kde · kdeFeb 8, 2020

  • CVE-2008-1670
    38Monitor

    Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0.3 allows remote atta

    CriticalCVSS 9.3No exploitEPSS 5%

    kde · kdeApr 28, 2008

  • CVE-2009-4035
    38Monitor

    The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and ve

    CriticalCVSS 9.3No exploitEPSS 4%

    kde · kdegraphicsDec 21, 2009

  • CVE-2004-0867
    35Monitor

    Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which c

    HighCVSS 7.5No exploitEPSS 17%

    mozilla · firefoxDec 23, 2004

  • CVE-2004-0866
    33Monitor

    Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which c

    HighCVSS 7.5No exploitEPSS 10%

    kde · konquerorSep 16, 2004

  • CVE-2019-7443
    33Monitor

    KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp.

    HighCVSS 8.1No exploitEPSS 2%

    kde · kauthMay 7, 2019

  • CVE-2016-7967
    33Monitor

    KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled.

    HighCVSS 8.1No exploitEPSS 2%

    kde · kmailDec 23, 2016

  • CVE-2013-2120
    33Monitor

    The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate pa

    HighCVSS 8.4No exploitEPSS 1%

    kde · paste appletFeb 11, 2020

  • CVE-2016-3100
    33Monitor

    kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of o

    HighCVSS 8.4No exploitEPSS 0%

    kde · kde frameworksJul 13, 2016

  • CVE-2004-0803
    32Monitor

    Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer ov

    HighCVSS 7.5No exploitEPSS 8%

    libtiff · libtiffDec 23, 2004

  • CVE-2004-0411
    32Monitor

    The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlo

    HighCVSS 7.5No exploitEPSS 8%

    kde · konquerorJul 7, 2004

  • CVE-2005-2971
    32Monitor

    Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a

    HighCVSS 7.5No exploitEPSS 6%

    kde · kofficeOct 20, 2005

  • CVE-2003-0988
    32Monitor

    Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows

    HighCVSS 7.5No exploitEPSS 6%

    kde · kdeFeb 17, 2004

  • CVE-2006-0019
    32Monitor

    Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allo

    HighCVSS 7.5No exploitEPSS 6%

    kde · kdeJan 20, 2006