Vendor/product archive

kde / konqueror_embedded CVEs

Beta · best-effort

4 CVEs tagged to kde / konqueror_embedded — 0 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to kde vendor archive

CVE-2003-0592

Published Apr 15, 2004

Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory tr…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2003-0459

Published Aug 27, 2003

KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2003-0370

Published Jun 16, 2003

Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a ma…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2003-0355

Published Jun 9, 2003

Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1