| Max CVSS | 7.5 | Min CVSS | 4.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2004-0689 | 4.6 |
KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.
|
26-01-2024 - 17:06 | 28-09-2004 - 04:00 | |
| CVE-2004-0721 | 7.5 |
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vul
|
11-10-2017 - 01:29 | 27-07-2004 - 04:00 | |
| CVE-2004-0746 | 7.5 |
Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session
|
11-10-2017 - 01:29 | 20-10-2004 - 04:00 | |
| CVE-2004-0690 | 4.6 |
The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory.
|
11-07-2017 - 01:30 | 28-09-2004 - 04:00 |