VYPR

Kdelibs

by Red Hat

CVEs (3)

  • CVE-2011-1094Mar 16, 2011
    risk 0.00cvss epss 0.01

    kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a…

  • CVE-2006-4811Oct 18, 2006
    risk 0.00cvss epss 0.04

    Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap…

  • CVE-2003-0459Aug 27, 2003
    risk 0.00cvss epss 0.03

    KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.