Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2010-1511

kdenetwork: improper sanitization of metalink attribute for downloading files

KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.

CVSS 2.0 · 6.4 Medium EPSS 3.3% KEV · Not listed
Vendors
Kde
Products
Kde Sc Kget