Search vulnerabilities

Results 2

Export CSV
CVE-2003-0459

security flaw

KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
CVE-2006-3742

The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a password by attempting to log in multiple times.

CVSS 2.0 · 10.0 Critical EPSS 1.4% KEV · Not listed
Vendors
Kde
Products